Security audit
Security checks across malware telemetry and agentic risk
This is a documentation-only security skill for managing agent secrets and wallet permissions, with some risky examples that require careful operator judgment.
Install only if you are intentionally building agents that handle secrets, wallets, or delegated spending. Use dedicated vaults, short-lived and tightly scoped session keys, explicit confirmations for high-value actions, and avoid copying the git force-push, hook-bypass, or open-delegation examples into production without an audited exception process and rollback plan.
if [ $FOUND_SECRETS -eq 1 ]; then
echo -e "${RED}⚠️ Secrets detected! Commit blocked.${NC}"
echo "Bypass with: git commit --no-verify"
exit 1
fi64/64 vendors flagged this skill as clean.
Detected: suspicious.exposed_secret_literal, suspicious.prompt_injection_instructions