skill-safety-audit
Skill Safety Audit
Overview
Use this skill as the repository's safety gate for new or changed skills. It checks instructions, scripts, references, and operational assumptions for unsafe tooling, hidden installation behaviour, data exfiltration risk, or prompt-injection style abuse.
Use When
- Use when a new skill is created or added to the repository.
- Use when a skill is updated from a third-party source.
- Use when a modified skill introduces new scripts, install steps, or workflow rules.
Do Not Use When
- Do not skip this audit for externally sourced skills.
- Do not treat formatting review as a substitute for safety review.
- Do not approve scripts or instructions you have not actually inspected.
Required Inputs
More from peterbamuhigire/business-plan-skills
digital-marketing-strategy
Generate the digital marketing strategy and AI strategy sections for a business plan. Use this skill whenever a business plan requires a digital marketing section, online marketing plan, social media strategy, or AI-assisted marketing plan. Every business plan must include both a digital marketing strategy and an AI marketing integration section.
2proposal-architect
>
2grant-proposal
Specialist skill for writing grant funding applications to development partners (USAID, EU, GIZ, UN Women, World Bank), government programmes (Youth Livelihood Programme, Women Enterprise Programme, Parish Development Model), and impact funds. Grant applications require completely different formats from bank loan plans LogFrame, Theory of Change, beneficiary analysis, and budget narrative. Use instead of (or alongside) the standard funding-request skill when the target funder is a grant body.
2risk-analysis
Generate the risk analysis section with risk identification, probability/impact matrix, mitigation strategies, contingency plans, and insurance considerations. Demonstrates awareness and preparedness investors trust founders who acknowledge risks. Incorporates Raydugin's three-part uncertainty naming, 5 addressing strategies (Avoid/Reduce/Transfer/Accept/Exploit), and Bowtie diagrams; Murray-Webster's behavioural biases (triple strand) and risk appetite framework; Olson's COSO ERM model and enterprise risk categories; plus Uganda-specific risk context from UBOS official statistics.
2blog-writer
Generate SEO-optimised, bilingual blog articles with featured images, in-article photography, and distinctive per-article design. Creates article content in docs/{lang}/blog/, builds Astro blog pages with Article JSON-LD, and updates the blog index. Works for any client website and any topic. Use when the user says "write a blog article", "create a blog post", "publish a blog", "write about [topic]", or wants to add content to the blog section.
2industry-guides
Industry-specific reference guides that tailor business plan generation to specific sectors. Each sub-directory contains best practices, financial benchmarks, operational standards, regulatory requirements, and common pitfalls for that industry. Use when generating or reviewing a business plan for a specific industry to ensure the plan reflects real-world industry norms, cost structures, and success factors. Invoke alongside any core skill (01-15) to inject industry-specific context.
2