org-agenda-api-production
Audited by Socket on Mar 10, 2026
1 alert found:
SecurityThe skill content centers on debugging/production investigation for a real API and includes direct credentials retrieval and accessible production endpoints. While the stated purpose is legitimate for debugging, the combination of plaintext credential exposure in docs, production endpoint access, and mutative API endpoints without explicit access controls constitutes a suspiciously high-risk footprint. This is not clearly aligned with safe, auditable development practices. Recommend removing or centralizing credential access behind a secure vault, restricting production endpoints with strict authorization, and requiring per-action user approvals for mutative operations. Overall risk: suspicious; potential for credential leakage and unintended production changes if misused.