Infra Importer

Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for Infra Importer concepts, best practices, and implementation patte...

Security Scan

The skill's declared purpose, runtime instructions, and included script are consistent and self-contained — it produces local reference text and does not request credentials or perform network activity.

Purpose & Capability

Name and description indicate a local reference tool. The SKILL.md and the included scripts provide only static reference text and help output; no external services, binaries, or credentials are required. The small mismatch in reported version (registry 2.0.1 vs script VERSION=2.0.0) is an editorial inconsistency but not a security concern.

Instruction Scope

SKILL.md explicitly states all commands output plain-text via heredoc with no network access; the script implements those commands and does not call external endpoints or read environment variables. Minor mismatches: the cheatsheet text mentions a 'troubleshooting' entry that isn't a separate command in the script, and help text uses an unexpanded $VERSION in a single-quoted heredoc—these are documentation/implementation inconsistencies, not evidence of malicious behavior.

Install Mechanism

No install spec is provided (instruction-only with a small helper script). No downloads or archive extraction; nothing is written to disk by an installer. Risk is limited to executing the included script locally if you choose to run it.

Credentials

The skill declares no required environment variables, credentials, or config paths, and the script does not read or export secrets. There is no disproportionate credential request.

Persistence & Privilege

always:false and user-invocable:true (normal). The skill does not attempt to modify other skills, system-wide agent settings, or persist configuration. Running the script executes with the invoking user's permissions (normal for local tools).

Assessment

This skill appears to be a simple, self-contained reference tool and does not request credentials or perform network calls. The included Bash script prints documentation; if you run it locally it will execute with your user permissions (as any script would). Before running any shipped script, you may: (1) quickly inspect the file (it is readable and short), (2) run it in a restricted environment or container if you prefer, and (3) be aware that the version string in the script differs from the registry metadata (likely a harmless packaging/doc mismatch).

Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for Infra Importer concepts, best practices, and implementation patte... No API keys or credentials required.

Commands

Command	Description
intro	intro reference
quickstart	quickstart reference
patterns	patterns reference
debugging	debugging reference
performance	performance reference
security	security reference
migration	migration reference
cheatsheet	cheatsheet reference

Output Format

All commands output plain-text reference documentation via heredoc. No external API calls, no credentials needed, no network access.

---

Powered by BytesAgain | bytesagain.com | [e-mail]