lythoskill-deck
Manages skill governance by syncing declared skills with the working set, ensuring only necessary skills are active and conflicts are eliminated.
Install this skill
or
90/100
Security score
The lythoskill-deck skill was audited on Jun 15, 2026 and we found 6 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
low line 43
Access to hidden dotfiles in home directory
SourceSKILL.md
| 43 | Cold Pool (~/.agents/skill-repos/) → deck add → skill-deck.toml → deck link → .claude/skills/ |
low line 53
Access to hidden dotfiles in home directory
SourceSKILL.md
| 53 | deck link --deck phase1-brand.toml --cold-pool ~/.agents/skill-repos |
low line 56
Access to hidden dotfiles in home directory
SourceSKILL.md
| 56 | deck link --deck phase2-content.toml --cold-pool ~/.agents/skill-repos |
low line 71
Access to hidden dotfiles in home directory
SourceSKILL.md
| 71 | cold_pool = "~/.agents/skill-repos" |
medium line 133
Access to hidden dotfiles in home directory
SourceSKILL.md
| 133 | | Cold Pool | All downloaded skills (`~/.agents/skill-repos/`). Agent cannot see here. | |
low line 168
External URL reference
SourceSKILL.md
| 168 | | `LYTHOS_GH_MIRROR` | You have a GitHub mirror/proxy | `export LYTHOS_GH_MIRROR="https://mirror.example.com"` | |
Scanned on Jun 15, 2026
View Security Dashboard