Security audit
Security checks for vulnerabilities and agentic risk
This is a small documentation-only audit skill whose behavior matches its stated TESP governance purpose.
Review the trigger wording if you want this skill invoked only for explicit TESP requests. From the inspected artifacts, it does not install code, run commands, access credentials, or persist changes beyond a disclosed short audit report.
The trigger text is unusually broad for a governance-oriented skill and overlaps with generic audit, rollout verification, and monitoring requests. In an agentic system, this can cause over-invocation or misrouting, letting the skill activate outside its intended narrow scope and potentially influence unrelated reviews or decision flows.
The file includes a Chinese introduction alongside the English description, but it does not state whether language selection is user-driven or optional. Under the policy, locale or language behavior should not be imposed without user choice unless clearly justified.
No suspicious patterns detected.
