devtools-secrets

SUSPICIOUS. The stated purpose is legitimate and the referenced tools/install sources are mostly coherent, but the skill crosses a trust boundary by executing numerous load-time shell commands and reading local config/auth state before approval. This is not confirmed malware, yet the pre-execution design and unnecessary local inspection make the skill higher risk than a normal documentation skill.