Xerg

This skill appears to be a local-first audit wrapper for an external CLI and largely behaves as described, but take these precautions before installing or using it: 1) Verify the upstream package/repository (README points to npm/@xerg/cli and github.com/xergai/xerg) because the registry entry here lacks source/homepage. 2) Inspect what the CLI would send on --push: do not use --push or store XERG_API_KEY if your logs/sessions contain sensitive prompts, secrets, or PII. 3) If you must audit, run xerg doctor with explicit --log-file and --sessions-dir paths (avoid broad home/glob paths) and inspect local snapshots (~/.xerg) to confirm they contain only aggregated economics metadata. 4) For remote audits, prefer running the CLI directly on the remote host or review the remote-config and rsync commands to ensure private keys/credentials are not copied to third parties. 5) If you plan to install the npm package, review its repository and package contents (or run npx with caution) to confirm behavior and data flows. If you want, I can try to fetch and summarize the GitHub/npm sources (if publicly available) so you can confirm the implementation matches the documentation.