secret-management

SUSPICIOUS: the skill’s purpose is coherent, but it expands agent capability through a custom external CLI, plaintext secret leasing into env vars, arbitrary rotation-hook command execution, and optional remote heartbeat control. The supply-chain path is only moderately trustworthy because installation centers on a personal GitHub repo and raw-script installer without surfaced checksum/signature verification.