Security audit
Security checks for vulnerabilities and agentic risk
This skill appears to be a benign reference command that prints static documentation and does not access credentials, network resources, or persistent system state.
Before installing, treat this as a lightweight static reference helper rather than authoritative Profile documentation. It does not appear to need credentials or network access; if it ever asks for secrets or performs actions beyond printing help text, that would be outside the inspected behavior.
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
## Prerequisites
- Basic understanding of devtools concepts
- Required tools and access credentials
- System meeting minimum requirements
## Installation
The manifest describes a reference tool for Profile concepts, quick lookup, best practices, and implementation patterns. The command handlers instead output broad, nonspecific boilerplate text about an unspecified 'profile' tool/concept, so the implemented behavior does not actually provide the claimed Profile-specific reference functionality.
The help block appears intended to show the current version, but cat << 'HELPEOF' disables variable expansion, so users will see the literal string $VERSION rather than the actual version number. This contradicts the apparent documentation intent of presenting versioned help output.
No suspicious patterns detected.