Security audit
Security checks for vulnerabilities and agentic risk
The skill is coherent for reading and summarizing Financial Times articles, but it needs review because it directs agents to use stored FT credentials and a persistent browser profile automatically.
Before installing, confirm you want agents to access FT.com with a stored account and persistent browser session. Prefer a dedicated FT-only browser profile, avoid placing real passwords in the skill text, and require explicit user approval before each authenticated run.
The skill description and capabilities specify bilingual analysis and English-Chinese summaries as a fixed behavior. This is a natural-language locale policy issue because it forces a specific language pair without offering the user a choice or documenting a justified regional constraint.
The skill explicitly instructs the agent to log into FT.com using stored credentials and a persistent browser profile, but it provides no user-facing warning, consent boundary, or limitation on when account access is appropriate. In an agent setting, this can cause unintended use of a paid or personal account, expose subscription-backed content handling risks, and normalize silent account actions without clear authorization.
The constraints section explicitly says to always provide both English and Chinese translations, which removes user language choice. This violates the language/locale policy criteria because the skill mandates a specific bilingual format rather than offering opt-in or alternatives.
No suspicious patterns detected.
