Security audit
Security checks for vulnerabilities and agentic risk
This skill is a low-risk static reference script, but its JWT decode content is generic and likely not very useful.
Before installing, understand that this appears safe from a security perspective but may disappoint users expecting real JWT decoding reference material; review it mainly for usefulness and accuracy rather than for sensitive-access risk.
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
## Prerequisites
- Basic understanding of devtools concepts
- Required tools and access credentials
- System meeting minimum requirements
## Installation
The top-of-file comment explicitly states this is a Jwtdecode reference tool for devtools contexts. The implementation contradicts that claim by serving generic sections on installation, migration, security, and debugging without jwtdecode-specific commands, APIs, formats, or usage details, creating an intent-versus-code/documentation divergence.
The manifest promises a reference tool for Jwtdecode concepts, best practices, and implementation patterns. However, every command prints broad, templated devtools guidance with generic phrases like 'specialized tool/concept in the devtools domain' rather than any jwtdecode-specific reference material, so the implemented behavior does not substantively match the claimed subject matter.
No suspicious patterns detected.