Security audit
Security checks for vulnerabilities and agentic risk
This skill is a simple local reference-documentation tool and I found no evidence that it reads credentials, uses the network, persists, or changes the system.
This appears safe to install as a lightweight reference skill, but users should treat the Roomba Control content as generic guidance rather than authoritative product documentation.
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
## Prerequisites
- Basic understanding of devtools concepts
- Required tools and access credentials
- System meeting minimum requirements
## Installation
The description repeatedly presents the skill as a general-purpose 'Reference tool for life' and 'Quick lookup' resource, which is broad enough to overlap with common requests rather than narrowly scoping when this skill should activate. The file lists command names, but it does not provide explicit trigger conditions, exclusions, or negative examples to prevent unintended invocation outside the Roomba Control domain.
The file comment frames the script as a Roomba Control reference tool for devtools contexts. However, much of the embedded documentation is generic boilerplate about networking, migrations, monitoring, and system tooling, which does not specifically reflect that stated intent and weakens the claimed specialization.
The manifest says this is a 'Reference tool' and 'Quick lookup' for Roomba Control concepts and patterns, which suggests concise reference material. The implemented commands expand into tutorial, migration, debugging, performance, and security guide content, making the behavior materially broader than the narrowly described quick-lookup scope.
No suspicious patterns detected.