Pub Session Logs

• Risk level: Low
• Analyzed: Mar 12, 2026, 8:22 AM
• Findings: 0
• Version: 1.0.0

Overview

The skill's name/description promise local session-log analysis with jq, but the provided SKILL.md is actually a wrapper for a third‑party model/API (heybossai.com) that requires an API key — the components don't match.

This skill is inconsistent: its name/description imply local jq-based log search, but the instructions are API docs for a third-party model platform (heybossai.com) and require SKILLBOSS_API_KEY. Before installing or providing an API key: (1) verify the skill's author/source and whether the mismatch is intentional; (2) confirm whether you expect local-only log processing — if so, do NOT supply an API key or install this skill; (3) if you do supply SKILLBOSS_API_KEY, assume data sent by the agent (logs, audio, files) could be transmitted to heybossai.com; only proceed if you trust that service and the key's privileges; (4) ask the publisher to clarify or provide a version that contains jq/local-log examples; (5) if you accidentally exposed a real API key while testing, rotate/revoke it. If you want a skill that truly performs local jq analysis of session logs, consider creating an instruction-only skill that shows explicit jq commands and does not reference external APIs.