Security audit
Security checks for vulnerabilities and agentic risk
The skill appears non-destructive, but it advertises Fakerjs reference help while mostly providing generic placeholder devtools text.
Review this before installing because it may mislead an agent or user looking for real Fakerjs help. It does not show signs of stealing data or changing your system, but the published purpose and actual documentation quality do not line up.
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
## Prerequisites
- Basic understanding of devtools concepts
- Required tools and access credentials
- System meeting minimum requirements
## Installation
The inline header claims the script is for working with Fakerjs in devtools contexts, yet the help and command outputs provide mostly generic devtools advice. In a skill ecosystem, this kind of semantic misrepresentation is dangerous because agents may select and trust the tool for Fakerjs-specific tasks and receive irrelevant or misleading output.
The skill advertises itself as a Fakerjs reference tool, but nearly all emitted content is generic placeholder material unrelated to Fakerjs APIs, usage, or implementation patterns. This creates a deceptive mismatch between declared purpose and actual behavior, which can mislead users and downstream agents into relying on inaccurate guidance in development workflows.
No suspicious patterns detected.