Security audit
Security checks for vulnerabilities and agentic risk
This is a small documentation lookup skill that prints static DevOps reference text and does not access credentials, network services, or persistent system settings.
Before installing, expect a generic DevOps reference helper rather than a full DevOps automation tool. It appears safe from a security perspective, but its documentation is shallow and contains one command-name mismatch that may confuse users.
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
## Prerequisites
- Basic understanding of devtools concepts
- Required tools and access credentials
- System meeting minimum requirements
## Installation
The manifest and README describe the skill as a general 'Reference tool for devtools' and 'Quick lookup' without clearly constraining when it should be invoked or what requests fall outside its scope. Although commands are listed later, the top-level description remains broad enough to overlap with many common development help requests and provides no negative examples or exclusion conditions.
The cheatsheet says the available command is 'troubleshooting', but the actual dispatcher only implements 'debugging' and has no 'troubleshooting' case. This is an active contradiction in the embedded documentation that can mislead users about the skill's interface.
No suspicious patterns detected.