Security audit
Security checks for vulnerabilities and agentic risk
This skill is a static Roomba Control reference helper that prints documentation and does not access credentials, network, files, or persistent system settings.
Review the content quality before relying on it: it appears to be generic reference text branded as Roomba Control. Security risk is low because it does not request secrets, run privileged actions, call the network, or persist changes.
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
## Prerequisites
- Basic understanding of devtools concepts
- Required tools and access credentials
- System meeting minimum requirements
## Installation
The manifest and header describe the skill as a generic "Reference tool for life" and "Quick lookup" resource without clearly limiting when it should activate or what user phrases should invoke it. This broad wording can overlap with ordinary requests and does not provide negative examples or explicit trigger boundaries.
The heredoc in show_help uses a single-quoted delimiter, so shell variables are not expanded. As a result, the documented banner 'roomba-control v$VERSION' contradicts the apparent intent of showing the real version value.
The manifest says this skill is a reference tool covering concepts and patterns, suggesting documentation lookup. In code, multiple commands output step-by-step operational guidance for installation, migration, debugging, and security workflows, which is materially broader than a simple reference/lookup role.
No suspicious patterns detected.