Security audit
Security checks across malware telemetry and agentic risk
This appears to be a real local secrets vault, but it needs Review because it handles credentials while documenting risky secret export/sharing features that are not included for review.
Review carefully before installing. Use a strong unique master password, avoid putting real secrets on command lines, avoid plaintext .env export unless strictly necessary, do not sync or commit session/share/decrypted files, and do not rely on the advertised sharing, injection, or audit features unless their code is supplied and reviewed.
if password:
return password
password_file = os.environ.get('SECRETS_VAULT_PASSWORD_FILE')
if password_file and os.path.exists(password_file):
with open(password_file, 'r') as f:
return f.read().strip()63/63 vendors flagged this skill as clean.