agentsecrets

SUSPICIOUS. The skill’s stated purpose matches secret management, but its real footprint depends heavily on a third-party CLI that brokers all credential use, API calls, and environment injection. That is proportionate to the purpose yet still high-trust and high-impact; the main concern is credential forwarding and broad autonomous API capability rather than confirmed malware.