Security checks across malware telemetry and agentic risk
This skill openly scaffolds local dev/test/prod project files; the main risk is that users must replace placeholder secrets and review generated scripts before real production use.
Install only if you want a tool that modifies a target project. Run it on the intended repository, inspect the generated .env and shell scripts, replace every placeholder secret before any production use, and review package files before allowing generated frontend scripts to run npm install.
def generate_env_file(env: str, config: dict) -> str:
"""Generate .env file content for a specific environment."""
settings = {
"dev": {
"APP_ENV": "development",def generate_env_file(env: str, config: dict) -> str:
"""Generate .env file content for a specific environment."""
settings = {
"dev": {
"APP_ENV": "development",66/66 vendors flagged this skill as clean.