Security audit
Security checks for vulnerabilities and agentic risk
This skill is a simple local reference script that prints documentation and does not access files, credentials, networks, or persistent system settings.
Installers should treat this as a low-risk reference skill, but should expect generic documentation rather than authoritative, product-specific Compose guidance. It does not appear to need credentials or network access.
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
## Prerequisites
- Basic understanding of data concepts
- Required tools and access credentials
- System meeting minimum requirements
## Installation
The manifest says this skill is a reference tool for Compose concepts, best practices, and implementation patterns. However, the script emits broad placeholder documentation about a generic 'compose' tool in 'data contexts' rather than actual Compose-specific reference content, so the implemented behavior does not match the claimed subject matter.
The file header says 'compose — Compose reference tool. Use when working with compose in data contexts,' which frames the tool as data-domain guidance. That directly conflicts with the manifest description that positions the skill as a devtools reference covering Compose concepts and implementation patterns.
This markdown file describes the skill in broad terms such as 'covers intro, quickstart, patterns and more' and 'Quick lookup for Compose concepts' without stating when the skill should or should not be invoked. The command list exists, but there are no explicit trigger constraints or negative examples to reduce unintended activation from general Compose-related requests.
No suspicious patterns detected.