The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides instructions to execute several standard Doppler CLI commands. This includes doppler login, doppler run, doppler setup, and doppler secrets set. These are legitimate uses of a secrets management tool and do not involve suspicious redirection or hidden shell execution. All command patterns are transparent and targeted towards the skill's stated purpose.
[DATA_EXPOSURE_AND_EXFILTRATION]: While the skill manages highly sensitive data (secrets), it follows best practices to prevent exposure. It explicitly recommends against downloading secrets to plain-text files and instead promotes the use of doppler run for process injection or --mount for ephemeral named pipes. It also suggests configuring HISTIGNORE to prevent secret leakage in shell history. There is no evidence of secrets being sent to unauthorized third-party domains.

doppler