Security audit
Security checks for vulnerabilities and agentic risk
This skill is a simple character counter with overstated documentation but no evidence of hidden, persistent, or data-stealing behavior.
Install this only if you need a minimal stdin-based character counter. Do not rely on the advertised file input, option flags, CJK-only counts, grapheme counts, JSON output, or detailed breakdowns unless the skill is updated to implement them.
The declared description promises several distinct text-analysis capabilities, including total, non-whitespace, CJK, and Unicode-aware character counts. The actual code only reads stdin and prints one basic length value. While that partially matches the 'total characters' portion, it omits the other advertised metrics and broader analysis features, so the description materially overstates the skill's behavior.
The manifest describes counting total, non-whitespace, CJK, and Unicode-aware character counts, implying multiple distinct metrics. The code only reads stdin and prints a single len(...) value, so the implemented behavior is materially narrower than the stated functionality.
No suspicious patterns detected.
