Security audit
Security checks for vulnerabilities and agentic risk
The skill does not appear to steal data or run harmful commands, but it is materially mislabeled: a Zsh themes reference mostly returns generic infrastructure guidance unrelated to Zsh themes.
Install only if you are comfortable with a low-specificity reference skill. It does not show evidence of credential theft or system modification, but its Zsh theme labeling is misleading enough that agents may surface irrelevant operational advice when you expect shell-theme guidance.
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
## Prerequisites
- Basic understanding of devtools concepts
- Required tools and access credentials
- System meeting minimum requirements
## Installation
The top-level description claims this is a zsh-themes reference tool, but the embedded material discusses broad service-management, networking, migration, and security topics instead. In an agent skill ecosystem, deceptive or mislabeled capabilities increase the risk of misuse, bad operator decisions, and trust abuse because consumers rely on metadata to select appropriate tools.
The script presents itself as a Zsh Themes reference tool, but nearly all command output is generic devtools and infrastructure guidance unrelated to zsh themes. This mismatch can mislead users and downstream agents into trusting irrelevant or unsafe advice in the wrong operational context, which is a supply-chain integrity problem even without code execution.
No suspicious patterns detected.