The Agent Skills Directory

[SAFE]: No malicious patterns or security risks were identified during the analysis.
[CREDENTIALS_UNSAFE]: The skill demonstrates excellent credential hygiene by explicitly refusing to store Secure Boot keys in version control or CI environments. It provides clear guidance on using offline, hardware-backed, or separated signing services instead of hardcoding secrets.
[DATA_EXFILTRATION]: No exfiltration patterns were found. The included diagnostic script (ge-key-governance.sh) follows best practices by using the shred utility to securely erase temporary cryptographic material from the filesystem after use.
[EXTERNAL_DOWNLOADS]: The skill only references official, well-known technical documentation from Espressif Systems and relies on standard development tools (openssl, idf.py, esptool.py). No downloads from untrusted or suspicious external sources were detected.
[PROMPT_INJECTION]: The instructions are designed to enforce security constraints and refuse unsafe user requests (e.g., requests to bypass secure storage protocols), serving as a defense against user-originated prompt injection rather than containing malicious overrides.

esp32-secureboot