infisical-sync-skill

The fragment describes an intentional Infisical-to-local-vault synchronization integration. It does not show clear malware or unrelated exfiltration, and it includes explicit redaction and token-handling rules. It nevertheless performs highly sensitive credential transfers and destructive vault operations. Review the surrounding executor for strict shell escaping, URL allowlisting, secret access authorization, secure temporary-file handling, and enforced user confirmation before enabling it in production.