developer-tools
Enhances developer experience by providing CLI tools, SDKs, and patterns for building command-line interfaces and managing resources.
Install this skill
Security score
The developer-tools skill was audited on Feb 9, 2026 and we found 18 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 55 | spinner.fail(chalk.red(`Failed: ${error.message}`)); |
Template literal with variable interpolation in command context
| 86 | console.log(chalk.green(`Created ${answers.type}: ${name}`)); |
Template literal with variable interpolation in command context
| 97 | console.log(`Set ${key}=${value}`); |
Template literal with variable interpolation in command context
| 176 | format: `${label} |{bar}| {percentage}% | {value}/{total}`, |
Template literal with variable interpolation in command context
| 214 | const response = await fetch(`${this.baseUrl}${path}`, { |
Template literal with variable interpolation in command context
| 218 | Authorization: `Bearer ${this.apiKey}`, |
Template literal with variable interpolation in command context
| 236 | get: (id: string) => this.request<User>('GET', `/users/${id}`), |
Template literal with variable interpolation in command context
| 242 | this.request<User>('PUT', `/users/${id}`, data), |
Template literal with variable interpolation in command context
| 244 | delete: (id: string) => this.request<void>('DELETE', `/users/${id}`), |
Template literal with variable interpolation in command context
| 250 | get: (id: string) => this.request<Project>('GET', `/projects/${id}`), |
Template literal with variable interpolation in command context
| 335 | `Attempt ${error.attemptNumber} failed. ${error.retriesLeft} retries left.` |
Template literal with variable interpolation in command context
| 348 | const response = await fetch(`${this.baseUrl}${path}`, { |
Access to .env file
| 122 | process.env.DEBUG = 'true'; |
Unicode escape sequences
| 177 | barCompleteChar: '\u2588', |
Unicode escape sequences
| 178 | barIncompleteChar: '\u2591', |
External URL reference
| 206 | this.baseUrl = options.baseUrl || 'https://api.example.com'; |
External URL reference
| 389 | { url: 'https://api.example.com', description: 'Production' }, |
External URL reference
| 390 | { url: 'https://staging-api.example.com', description: 'Staging' }, |