Security audit
Security checks for vulnerabilities and agentic risk
This is a simple jq reference skill with disclosed examples; its file-write and curl examples are user-run commands, not hidden behavior.
Install only if you want jq command examples available to your agent. Review commands before running them on real files, especially examples that overwrite package.json, and avoid using curl examples with private endpoints or secrets unless you intend that network request.
The markdown includes a 'Modify and save' example that writes a transformed JSON file back to disk via a temporary file and mv, which can overwrite the original package.json. The surrounding skill description does not warn users that some examples perform file-modifying operations or advise reviewing paths/backups before running them.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Extract specific fields from API response:
curl -s https://api.github.com/users/octocat | jq '{name: .name, repos: .public_repos, followers: .followers}'
Convert CSV-like data:
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Debug API responses:
curl -s https://api.example.com/data | jq '.'
No suspicious patterns detected.