Security audit
Security checks for vulnerabilities and agentic risk
The skill is an HTML/WCAG audit guide with disclosed command-line and network validation steps; broad routing language warrants caution, but no hidden or malicious behavior was found.
Install only if you want an agent to help audit local or authorized websites with HTML/WCAG tooling. Before use, confirm the target site is authorized, avoid passing secrets unless required for authenticated crawling, prefer environment variables for credentials, and treat the broad trigger wording as a documentation quality issue to tighten.
The skill presents itself as a Markdown-only HTML auditing tool, yet it explicitly enables command execution and outbound network use for crawlers and validators. That mismatch can cause operators or routing systems to grant broader execution and network privileges than expected, increasing the chance of unintended scanning or shell-capable behavior beyond the stated purpose.
The documentation is internally inconsistent: it claims to be pure Markdown with no extra operational requirements, while elsewhere describing authenticated crawling and command-driven external validation. Such contradictions can mislead users and automated policy systems into underestimating the privileges and external connectivity the skill actually uses.
The activation language is broad enough to match generic requests about security checks, compliance, quality inspection, encryption, automation, and analysis. Overbroad triggers increase the chance that an agent invokes this skill in contexts the user did not intend, potentially granting exec/networked audit behavior on unrelated tasks.
The coverage section lists ambiguous keywords rather than strict eligibility criteria, making it easier for an agent to select this skill opportunistically. In a skill with read/write/exec tools, ambiguous routing raises the risk of unnecessary file operations, command execution, or network scanning being triggered by loosely related prompts.
No suspicious patterns detected.
