Claims
The skill is an autonomous 'factory' that creates cross-platform agent skills from various inputs (text, URLs, files, screenshots). It claims to be security-scanned, self-contained, and compatible with 17 platforms. It handles the entire lifecycle from raw material to production-ready skill.
Actual behavior
The provided `install.sh` script is a standard, POSIX-compliant installer. It detects global platform directories (e.g., `.claude`, `.copilot`) and creates symlinks (or copies) to the skill's directory. It supports `--dry-run` and `--uninstall` modes. The logic is transparent, using standard shell commands (`ln`, `rm`, `cp`, `readlink`) without complex network calls or external dependencies during installation.
medium secret_access — references credentials / private keys / secrets (legitimate for some tools; see behavior)
hardcoded API keys, .env files, injection pa