secret-management

SUSPICIOUS: the skill’s purpose and stated data flows are coherent for secret management, and its external destinations are mostly official services. However, it requires an unverifiable local CLI/script to read and write secrets, then materializes plaintext secret files and syncs values outward, which makes the trust and credential-handling footprint high-risk even without clear evidence of malicious exfiltration.