doppler-secret-validation

SUSPICIOUS. The core Doppler storage/retrieval workflow is coherent and uses official Doppler tooling, but the skill's footprint extends beyond validation by forwarding retrieved secrets to arbitrary API endpoints and authorizing self-modification. This is not confirmed malware, yet the combination of credential handling, outbound network use, and unclear helper-tool provenance makes the skill higher risk than a narrowly scoped secret-management guide.

The code has a concrete Python code-injection risk in test_env_injection because the command-line secret name is interpolated into executable Python source without escaping. It also exposes secret material in stdout by design. No independent network exfiltration, persistence, or destructive behavior is present in the fragment; Doppler CLI activity is consistent with the stated validation purpose. Treat crafted or untrusted arguments as unsafe and avoid printing secret values.