Security audit
Security checks for vulnerabilities and agentic risk
This skill appears to be a low-risk reference script that prints generic documentation, though its Secret Encrypt guidance is vague and not very substantive.
Install only if you are comfortable with a very lightweight, generic reference helper. It does not appear to access credentials or the network, but you should not rely on it as authoritative Secret Encrypt documentation without checking primary sources.
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
## Prerequisites
- Basic understanding of devtools concepts
- Required tools and access credentials
- System meeting minimum requirements
## Installation
The manifest and intro describe the skill generically as a reference tool covering 'intro, quickstart, patterns and more' and 'quick lookup' without stating clear invocation boundaries or exclusion conditions. For a markdown file, this creates ambiguity about when the skill should activate versus other general documentation or help skills.
The manifest says this skill is a reference tool for Secret Encrypt concepts, best practices, and implementation patterns. In code, every command prints broad, templated content with generic phrases like 'specialized tool/concept in the devtools domain' rather than concrete Secret Encrypt reference material, so the implemented behavior does not substantively match the claimed subject matter.
The header comment and help text present the script as a 'Secret Encrypt Reference Tool.' However, the command implementations return largely nonspecific documentation boilerplate applicable to many tools, contradicting the documentation's claim that this is a genuine Secret Encrypt reference.
No suspicious patterns detected.