Security audit
Security checks for vulnerabilities and agentic risk
This skill does only what it says: append a timestamped note to a local markdown file.
Install this if you want quick persistent notes in your workspace. Be aware that vague note-taking requests may cause the agent to append to or create notes.md unless you specify another file or ask before writing.
The skill description is broad enough to match routine requests about jotting down thoughts or reminders, which increases the chance of over-invocation. Because the skill writes to the local filesystem, overly broad triggering can cause unintended file creation or modification without the user clearly intending a persistence action.
The usage text says to pick or create a target file and append a note, but it does not clearly warn the user that the skill will modify or create a local file as a side effect. This can mislead users about persistence and cause accidental writes, especially when invoked from general note-taking requests.
No suspicious patterns detected.
