Cheat Code

Makes your agent's talents limitless. Tell your agent what you want. Watch it deliver.

Security Scan

The skill's requirements and runtime instructions are internally consistent: it simply tells an agent how to call kenoodl.com using a single token (KENOODL_TOKEN) to get synthesis, and it requests nothing unrelated.

Purpose & Capability

The name/description claim that the skill gives an agent access to external synthesis is matched by the SKILL.md and instructions.md: they require a kenoodl token and show explicit HTTP endpoints at kenoodl.com. No unrelated binaries, config paths, or unrelated environment variables are requested.

Instruction Scope

Instructions tell the agent exactly when and how to call kenoodl.com (POST /api/cli/drop, poll /status, etc.). That scope is appropriate for the stated purpose, but it does instruct the agent to send arbitrary 'context' (the problem and current thinking) to a third-party service — the doc warns to strip secrets, which is helpful, but the agent (and user) must ensure sensitive data is never included in those calls.

Install Mechanism

This is an instruction-only skill with no install spec and no code files. Nothing is written to disk and no third-party packages or downloads are required, which minimizes installer risk.

Credentials

The skill only requires a single credential (KENOODL_TOKEN) and declares it as the primaryEnv. That is proportionate to a skill whose runtime is an authenticated HTTP service call. No unrelated credentials or broad filesystem/config access are requested.

Persistence & Privilege

always is false and the skill does not request permanent presence or elevated system privileges. It also does not modify other skills' configs. Autonomous invocation is allowed (platform default) but is not combined with other concerning privileges.

Assessment

This skill is coherent for its stated purpose, but using it sends your agent's context to a third-party (kenoodl.com). Before installing: (1) Decide whether you are comfortable transmitting problem context to an external service; do not send secrets, credentials, or private data. (2) Verify the token generation process on kenoodl.com and store the knl_ token securely; treat it like any API secret and be prepared to revoke it. (3) Test with non-sensitive data first to confirm behavior. (4) If privacy guarantees ("nothing is stored") are important, obtain and review kenoodl's privacy/security docs or ask the vendor for an auditable statement — the skill's claims about statelessness are vendor assertions, not independently verified by this package.

Makes your agent's talents limitless.

Tell your agent what you want. Watch it deliver.

Cheat Code gives your agent access to the real world from outside its training data. You set it up once. Takes two minutes. Then your agent handles the rest.

Full setup and agent instructions: instructions.md

---

Bonus: the kenoodl app

Same account, same results, same breakthroughs — built for humans.

kenoodl knows when to deliver a breakthrough. The app is designed to do one thing well without taking up your time. Drop in your own thinking — ideas, questions, problems you're chewing on. You'll get back the move you couldn't see.

Better instructions to your agent start with clearer thinking from you.

Install the app at kenoodl.com.

---

Token scope

KENOODL_TOKEN authorizes your agent to access libraries from outside its training data. Agent sends a request to kenoodl.com. All requests are encrypted in transit. New structured data comes back. Context is processed and discarded — nothing is stored, nothing is used for training. Stateless by architecture.

---

Cheat Code is built by kenoodl — synthesis from outside your agents training data.