The Agent Skills Directory

[Indirect Prompt Injection] (LOW): The skill creates an attack surface by intending to process external .env files while possessing high-privilege capabilities. ● Ingestion points: Processes .env files as described in the purpose and triggers. ● Boundary markers: Absent; the skill does not define delimiters to separate data from instructions. ● Capability inventory: Grants access to powerful tools including Bash, Write, Edit, and Grep. ● Sanitization: No sanitization or validation of the input data is mentioned in the skill definition.
[Data Exposure & Exfiltration] (LOW): The skill targets .env files, which are specifically identified as sensitive file paths. Although no malicious code is present, the focus on these files combined with Bash access is a security concern. Severity is lowered as this focus is central to the skill's stated purpose.

dotenv-manager