Security audit
Security checks for vulnerabilities and agentic risk
This skill is a product-planning assistant that reads project context and may create a design document, with no evidence of hidden code, credential use, or exfiltration.
Before installing, expect the skill to inspect project context and potentially create a design document in your project. Use it in repositories where that is acceptable, and specify the desired document path or ask it to show the draft before writing if you want tighter control.
The skill instructs the agent to write a design document into the project directory without requiring explicit user consent at the point of modification. This is dangerous because it can cause unexpected workspace changes, overwrite user files, or create artifacts in sensitive repositories, especially when the skill is framed primarily as consultation rather than file-modifying automation.
The manifest describes an Office Hours-style consulting skill focused on reframing the problem before coding, which suggests conversational analysis. However, the documented workflow explicitly tells the agent to read repository documents, inspect git history, map code areas, and later write a design document into the project directory, expanding beyond pure consultation into repo analysis and artifact creation.
No suspicious patterns detected.
