The Agent Skills Directory

[SAFE]: No security issues detected. The skill follows established patterns for the agent-skills ecosystem, focusing on boilerplate generation and project configuration.
[DATA_EXPOSURE]: The scripts/profile_store.py script manages local user profile data in ~/.config/agent-skills/. It includes security controls to prevent the storage of sensitive fields like tokens, secrets, or passwords by checking against a defined blocklist of sensitive keywords.
[COMMAND_EXECUTION]: The skill uses local utility scripts for validation and profile management. These scripts perform standard file I/O operations and use safe parsing methods such as yaml.safe_load and json.loads.
[INDIRECT_PROMPT_INJECTION]: The skill processes project files during its workflow. While this is an ingestion surface, the skill defines clear execution boundaries and remains within its intended scope of authentication integration.

lov-init-auth