Security audit
Security checks for vulnerabilities and agentic risk
This skill is a documentation helper that fetches or uses provided command documentation to draft tldr pages, with no install-time code, persistence, credential use, or hidden behavior found.
Installers should treat this as a benign documentation-generation skill. Review any generated tldr examples before running them, especially commands that reset, delete, clean, or force changes, and be aware that passing help-like flags may cause the skill to summarize its own instructions instead of creating a page.
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
git reset --hard; git clean {{[-f|--force]}}
### Output Formatting Rules
The skill instructs the agent to switch behavior whenever a help-like argument such as --help, --tldr, or similar is 'passed', but it does not clearly constrain whether that applies only to the target command input versus arbitrary accompanying text. In a prompt-driven system, this can cause unintended mode switching from normal page generation to summarizing the prompt itself, enabling input confusion and bypass of the skill's expected workflow.
No suspicious patterns detected.