Security audit
Security checks for vulnerabilities and agentic risk
This skill performs disclosed, local static-site edits to improve machine-readable citation metadata, with no evidence of hidden network access, persistence, or unrelated authority.
Install this only if you want an agent to edit static-site files for AEO/SEO metadata. Run audit and dry-run first, use version control or backups before applying changes, and point it at the specific site folder rather than a broad home or project directory.
The skill explicitly instructs the agent to read and modify user files in place, but it does not declare any tool scope or permissions boundaries. Without an explicit allowlist for file operations, an agent or runtime may grant broader filesystem access than users expect, increasing the risk of unintended or excessive file reads/writes.
Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.
Software, and to permit persons to whom the Software is furnished to do so.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN
AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
No suspicious patterns detected.