Survey

Survey - command-line tool for everyday use

Security Scan

The skill appears to do what it says (a local survey/notes CLI that stores logs under your home directory); there are some small inconsistencies in its documentation vs. the included script but no signs of network exfiltration or unexpected credential requests.

Purpose & Capability

The skill's stated purpose (a local survey / questionnaire CLI) matches the included script which writes and reads logs in a local data directory. Minor incoherences: SKILL.md mentions an environment variable SURVEY_DIR to change the data directory but the script does not read SURVEY_DIR and instead hardcodes DATA_DIR to ${HOME}/.local/share/survey. The SKILL.md command list is shorter and slightly different from the many commands implemented in the script. Registry metadata version (1.0.1) differs from SKILL.md version string (2.0.0). These are documentation/packaging issues but not evidence of malicious intent.

Instruction Scope

Runtime instructions are local and file-based. The script creates a data directory under the user's home, appends timestamped entries to per-command .log files, and provides export/status/search features. It does not attempt to read unrelated system credentials or access network endpoints. Note: the SKILL.md suggests configuring SURVEY_DIR but the script ignores that env var — the instructions and implementation are inconsistent.

Install Mechanism

No install spec is provided and the skill includes a single shell script. There is no network download or packaged installer, so nothing arbitrary is fetched at install time. The script being included with the skill means code is present, but no high-risk install behavior is used.

Credentials

The skill requests no environment variables, no credentials, and no config paths. It writes only to a directory under the user's home. This level of access is proportionate to a local CLI that stores user survey data.

Persistence & Privilege

The skill is not marked always:true and does not modify other skills or system-wide agent settings. Its persistence is limited to creating and updating files in ~/.local/share/survey, which is a reasonable scope for this utility.

Assessment

This skill appears to be a local CLI that stores survey entries under your home directory (~/.local/share/survey). Before installing, note: 1) the documentation (SKILL.md) claims you can set SURVEY_DIR but the included script ignores that and always uses ~/.local/share/survey — if you want data elsewhere, edit the script or ensure you move the directory. 2) The SKILL.md and script versions/command lists differ (documentation mismatch). 3) The script will create and append plain-text logs containing whatever you input — treat those files as potentially sensitive and consider file permissions or relocating the data directory. There are no network calls or credential requests in the shipped script, so there is no obvious exfiltration, but if you do not trust the publisher, review the full script before running or run it in a sandboxed environment.

Survey builder — create questionnaires, collect responses, analyze results, export data.

Commands

Command	Description
survey help	Show usage info
survey run	Run main task
survey status	Check current state
survey list	List items
survey add <item>	Add new item
survey export <fmt>	Export data

Usage

survey help
survey run
survey status

Examples

# Get started
survey help

# Run default task
survey run

# Export as JSON
survey export json

Output

Results go to stdout. Save with survey run > output.txt.

Configuration

Set SURVEY_DIR to change data directory. Default: ~/.local/share/survey/

---

Powered by BytesAgain | bytesagain.com Feedback & Feature Requests: https://bytesagain.com/feedback