Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed patent-analysis skill that may create a local HTML report, with no hidden code, credential use, or persistence beyond that report.
Before installing, expect a structured patent white-space analysis workflow that pauses at two confirmation points and may create a local HTML report in the workspace. Only authorize PatSnap MCP access if you are comfortable sharing the relevant patent queries, map details, and business context with that service.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
Do not choose a candidate on the user’s behalf.
Do not continue to contradiction diagnosis without confirmation of problem value.
Do not perform technical feasibility validation.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
Do not choose a candidate on the user’s behalf.
Do not continue to contradiction diagnosis without confirmation of problem value.
Do not perform technical feasibility validation.
The manifest describes a workflow for identifying and assessing patent white-space signals, with explicit limits on downstream analysis, but it does not mention generating files or persisting artifacts. Stage 8 adds a concrete report-generation and file-output behavior by directing creation of an HTML file with a specific filename in a workspace directory.
The instructions explicitly require lang="en" and an English system-font stack, which forces a specific language/locale choice in the generated report. The file does not offer the user a language choice or document a justified region-specific need for English-only output.
The core purpose is analytical reasoning over patent-map evidence with confirmation gates and bounded outputs. Writing a self-contained HTML report to a workspace directory introduces a persistence/output capability that is ancillary and not explicitly declared in the manifest’s purpose statement.
No suspicious patterns detected.