Security audit
Security checks for vulnerabilities and agentic risk
This is a straightforward Gitea CLI reference skill with some powerful manual commands that users should run carefully.
Install only if you intend to let the agent help operate Gitea through your tea CLI account. Review destructive or sensitive commands before running them, especially repository deletion, action secrets, variables, comments, releases, and webhooks.
This markdown file includes a force-delete command for a repository, but it does not warn the user that the action is destructive and potentially irreversible. Under the markdown-specific warning criteria, commands that can affect user data or system integrity should be accompanied by a clear caution.
The skill describes listing and creating action secrets, which involves handling sensitive credentials, but it provides no warning about securely entering, storing, or auditing secret values. Markdown skill descriptions should warn about behaviors that may affect privacy or credential safety.
Creating a webhook can send repository event data to a third-party endpoint, which has privacy and integrity implications, but the markdown provides no disclosure of that behavior. This is a user-impacting network/data-transmission action that should be explicitly warned about in the skill description.
