Security audit
Security checks for vulnerabilities and agentic risk
This skill is a small local recipe matcher with no evidence of hidden access, network activity, persistence, or data exfiltration.
Reasonable to install for recipe suggestions. Before using its substitution advice for real meals, check allergies, intolerances, dietary rules, and food-safety needs yourself; the skill does not consistently guard against those constraints.
The skill instructs the agent to read local files such as references/recipes.md and relies on other repository files, but it does not declare any explicit tool scope or permissions. This creates an authorization gap where an agent may infer broader file-read capability than intended, increasing the risk of unintended local file access if the skill is executed in a permissive environment.
This substitution reference suggests ingredient swaps without warning that many alternatives may be unsafe for users with allergies, intolerances, religious restrictions, or dietary constraints. In a cooking skill that recommends substitutions automatically, this can cause harmful or misleading guidance such as replacing dairy with soy or nuts, or fish/chicken swaps for users avoiding animal products.
No suspicious patterns detected.
