Security audit
Security checks for vulnerabilities and agentic risk
This skill is a local plain-text reference helper with minor documentation quality issues but no credential access, network behavior, persistence, or destructive actions.
This appears safe to install from a security standpoint, but expect generic reference output and a couple of small documentation inconsistencies rather than authoritative mlfinlab-specific guidance.
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
## Prerequisites
- Basic understanding of devtools concepts
- Required tools and access credentials
- System meeting minimum requirements
## Installation
The help output says mlfinlab v$VERSION, which implies it will show the actual version. Because the here-document delimiter is single-quoted (<< 'HELPEOF'), shell expansion is disabled and users will see the literal text $VERSION instead of 2.0.1, contradicting the apparent documentation intent.
The cheatsheet presents troubleshooting as an available command, but the dispatcher only implements debugging, not troubleshooting. This is an active mismatch between embedded documentation and actual behavior, and users following the cheatsheet would get an unknown-command error.
No suspicious patterns detected.