Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward local article generator for South African tax content, with no evidence of hidden access, persistence, credential use, or exfiltration.
Install only if you need South African SARS/VAT/PAYE article drafts. Review all tax deadlines, penalty rates, and generated legal/compliance statements before publishing, and treat any future WordPress publishing integration as requiring separate credential and posting controls.
The skill declares no explicit tool scope or permissions despite indicating code components that can perform file-writing operations. In agent environments, missing tool restrictions can allow broader-than-intended filesystem access, increasing the risk of unauthorized file creation or modification if the implementation or surrounding runtime is misconfigured.
The file repeatedly states that the skill generates South African tax, VAT, and SARS compliance content as a fixed behavior. This imposes a specific regional/legal locale in the skill description without any indication that users can choose another locale or explicitly opt into this constraint.
The top-level natural-language description states that the generator produces South African tax compliance articles, which imposes a specific national/legal locale. There is no accompanying language indicating that the skill is region-specific by design, optional for the user, or otherwise constrained to users who want South African content.
No suspicious patterns detected.
