reason-machines/devtools-skills217 installs
byterover-cli-memory-layer
A reusable agent skill published by reason-machines/devtools-skills.
How do I install this agent skill?
npx skills add https://github.com/reason-machines/devtools-skills --skill byterover-cli-memory-layerIs this agent skill safe to install?
- Gen Agent Trust Hubfail
The skill promotes a high-risk installation method using a shell script piped from a remote server, which allows for unvetted remote code execution. It also handles sensitive API keys for multiple LLM providers and exposes a significant attack surface for indirect prompt injection due to its 'code exec' capability and lack of sanitization for project-sourced data.
- Socketwarn
1 alert: gptAnomaly
- Snykfail
Risk: CRITICAL · 3 issues
How can the creator link this skill?
Add the canonical catalog link to the repository README so users can inspect current installs and available audits. The publishing guide covers the complete discovery path.
<a href="https://skillzs.dev/skills/reason-machines/devtools-skills/byterover-cli-memory-layer">View byterover-cli-memory-layer on skillZs</a>