Security audit
Security checks for vulnerabilities and agentic risk
This README generator is a simple documentation skill that reads project structure to draft a README, with no code execution, persistence, or hidden behavior found.
Install this if you are comfortable with the agent inspecting the project tree and common project files to draft documentation. Review the generated README before publishing, especially if the repository contains private filenames, internal scripts, or sensitive project details.
The trigger phrase "readme" is broad enough to match many ordinary user requests, which can cause this skill to activate in contexts where the user did not explicitly request repository scanning or README generation. Because the skill then instructs the agent to inspect project files and structure, overbroad activation increases the chance of unnecessary file access and unintended data exposure.
The skill directs the agent to inspect files like package.json, LICENSE, tests, and docs, but the description does not clearly disclose that repository contents will be scanned to produce the README. This lack of transparency can lead to users unknowingly authorizing broader project inspection than expected, especially if sensitive material exists in the scanned paths.
No suspicious patterns detected.
