Security audit
Security checks for vulnerabilities and agentic risk
This skill is a plain-language workflow for safer versioning, backups, and rollback during editing work, with no executable code or hidden data behavior.
Install this if you want agents to be more disciplined about backups, version names, changelogs, and rollback points. Expect it to create or preserve extra local copies during larger edits; for small one-off changes, you may need to tell the agent not to apply the full protocol.
The manifest description says to use the skill for editing a very wide range of artifacts and to trigger on broad request types like refactoring, revision, redesign, rework, and collaboration. These terms overlap with common project requests and do not clearly bound when the skill should not activate, increasing the chance of accidental invocation.
The instruction to apply V.A.R. whenever overwrite cost is higher than the cost of being more disciplined is subjective and difficult to evaluate consistently. Without concrete thresholds or exclusions, different agents may invoke the skill in inconsistent situations.
No suspicious patterns detected.
