agent-vault-secret

SUSPICIOUS. The main workflow is coherent with a secret-management skill and aligns with official Agent Vault behavior, so this is not confirmed malware. However, it performs high-impact secret and token administration, routes traffic through a proxy by design, and references an unprovided installer/helper script plus a third-party UI dependency, leaving meaningful supply-chain and credential-forwarding risk.