Security audit
Security checks for vulnerabilities and agentic risk
This skill is a simple local reference script that prints generic devtools guidance; it under-delivers on OpenAPI-specific content but does not show unsafe credential access, persistence, network use, or system modification.
Install only if you want a lightweight generic devtools checklist. Do not expect detailed OpenAPI specification guidance; review the static script content first if accurate OpenAPI reference material matters to your workflow.
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
## Prerequisites
- Basic understanding of devtools concepts
- Required tools and access credentials
- System meeting minimum requirements
## Installation
The manifest and header describe this as an 'openapi' reference tool for OpenAPI work, which implies content specifically about the OpenAPI specification or related tooling. Instead, every command prints broad, templated devtools advice with almost no OpenAPI-specific material, so the implemented behavior does not match the claimed purpose.
The file header states 'openapi — Openapi reference tool,' which actively sets an expectation that the script provides OpenAPI reference information. The actual command bodies emit generic operational guidance applicable to many domains, creating a direct contradiction between the documentation claim and the implemented content.
No suspicious patterns detected.