Security audit
Security checks for vulnerabilities and agentic risk
This skill appears to be a low-risk plain-text reference helper, though its content is mostly generic rather than genuinely Whois-specific.
Install only if you are comfortable with a basic, mostly generic reference script. It does not appear to access secrets, call the network, or modify the system, but users expecting real Whois-specific operational guidance may find the content incomplete or misleading.
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
## Prerequisites
- Basic understanding of devtools concepts
- Required tools and access credentials
- System meeting minimum requirements
## Installation
The description repeatedly uses generic phrases like 'Reference tool for devtools' and 'Quick lookup' without explaining when this skill should activate versus other general help or reference skills. It also does not provide negative examples or a narrow invocation context, which can make routing ambiguous in manifest/markdown-based skill selection.
The manifest says this skill is a reference tool for 'Whois Checker concepts, best practices, and implementation patterns.' However, every command emits broad templated devtools text with vague phrases like 'specialized tool/concept' rather than concrete WHOIS-checker-specific reference content. This creates a semantic mismatch between the claimed subject-matter behavior and the actual code output.
The top-of-file comment asserts a specific intent: a reference tool for Whois Checker in devtools contexts. But the implemented command handlers output mostly boilerplate guidance applicable to almost any tool, without meaningful Whois Checker-specific documentation. That makes the documentation actively misleading about what the script provides.
No suspicious patterns detected.