Security audit
Security checks for vulnerabilities and agentic risk
This skill is a data-analysis helper with broad local tooling, but the inspected artifact does not show hidden, destructive, or deceptive behavior.
Before installing, treat it as a local data-analysis skill that may read, write, and execute code in the working environment. Use it with datasets and directories you intend to analyze, and review any generated Python or command execution before running it on sensitive files.
The skill is presented primarily as a data-analysis assistant, but later sections describe generic command execution and troubleshooting for arbitrary command failures. This capability expansion can mislead users and agents into invoking shell execution outside the justified scope, increasing the chance of unsafe local command execution or abuse of the enabled exec tool.
The skill declares the exec capability even though its stated purpose is data cleaning, statistics, visualization, and report generation, which do not inherently require unrestricted command execution. Granting exec without clear necessity violates least privilege and can enable file-system changes, external process launch, or execution of attacker-influenced commands if the skill is later driven by untrusted input.
No suspicious patterns detected.
