Security audit
Security checks for vulnerabilities and agentic risk
This skill runs a local standard-library Python path planner and does not show active file-writing, network, credential, or persistence behavior.
Install only if an archive-style CSV path is the intended destination format for your workflow. The skill appears low-risk operationally, but users should verify that downstream systems will not treat the returned archives/*.csv path as a knowledge-base article location without additional review.
A skill described as a pure planner may actually execute a generic operation and materialize effects to a user-specified output directory, despite no declared permissions. This is dangerous because hidden write-capable behavior can be abused for unauthorized file creation or workspace manipulation when callers expect a harmless path-computation function.
A skill described as a pure planner may actually execute a generic operation and materialize effects to a user-specified output directory, despite no declared permissions. This is dangerous because hidden write-capable behavior can be abused for unauthorized file creation or workspace manipulation when callers expect a harmless path-computation function.
A skill described as a pure planner may actually execute a generic operation and materialize effects to a user-specified output directory, despite no declared permissions. This is dangerous because hidden write-capable behavior can be abused for unauthorized file creation or workspace manipulation when callers expect a harmless path-computation function.
Without declared permissions the skill's intent is opaque and cannot be validated.
The output schema only permits paths matching archives/...\.csv, which conflicts with the skill’s stated purpose of planning a knowledge-base placement path and with the accepted document kinds such as project summaries and implementation notes. This mismatch can cause downstream systems to misroute content into archive CSV locations, leading to improper storage, type confusion, or accidental exposure/overwrite if other components trust this path as a safe knowledge-base destination.
No suspicious patterns detected.
