Security audit
Security checks for vulnerabilities and agentic risk
This skill is a travel/customer-visit SOP generator whose external lookups are disclosed and purpose-aligned, though users should be mindful of business data sent to third-party services.
Install only if you are comfortable using third-party travel, map, weather, search, and enterprise-information services for business itinerary planning. Avoid entering confidential customer details unless your organization permits those lookups, and prefer redacted or generalized queries when exact client information is not necessary.
The skill relies on multiple external APIs for travel, mapping, weather, and enterprise lookup, yet it does not disclose that user itinerary details and client information may be shared with those third parties. In a business-travel context, such undisclosed data sharing can expose sensitive customer relationships, travel plans, and operational details to external processors.
The skill explicitly gathers and verifies customer address, contact, and enterprise information via networked services, but it provides no warning that potentially sensitive business contact data may be transmitted to third-party providers. This creates a privacy and data-governance risk because users may unknowingly submit client information to external services without consent, minimization, or handling guidance.
No suspicious patterns detected.
