Security audit
Security checks for vulnerabilities and agentic risk
This is a small tee-like utility whose file-writing behavior is expected, but users should know it overwrites files and its documented options are not actually implemented.
Install only if you want a minimal pipe-output saver. Treat it as overwrite-only: do not use it on important files unless you intend to replace them, and do not rely on the documented -a or multi-file behavior unless the implementation is fixed.
The script writes stdin content to a file at a user-supplied path or to the default file 'out.txt'. There is no confirmation prompt, logging/print statement about the write target, or inline documentation warning the user that input will be persisted to disk.
The skill documentation clearly states that the tool writes stdin to one or more files, but it does not warn that existing files are overwritten by default unless -a is used. In an agent setting, this omission can lead to unintended data loss if the tool is used on important paths or logs, especially when chained into automated workflows.
