Credential Handling Safety Reviewer

What this skill does

Review scripts and docs for safer handling of passwords, tokens, keys and sensitive values.

• Review
• Security
• Agensi

Where it runs, and how to install it

Agent Skills are a format, not a product feature: a folder with a SKILL.md and whatever files it needs. Nothing inside one is model-specific.

Claude

Drop the skill folder into ~/.claude/skills/, or upload it in Settings → Capabilities. Claude loads it when the description matches what you asked for.

Claude Code

Same folder, per-project instead: .claude/skills/ inside the repository, so the skill travels with the work rather than with the machine.

Any agent that reads SKILL.md

A skill is a folder with a SKILL.md and whatever files it needs. Nothing in the format is model-specific, so a runtime that reads the file reads the skill.

Skills that do related work

• Supplier Due Diligence PackCreates supplier due diligence questionnaires, third-party risk checks, onboarding summaries, approval notes, evidence requests, review schedules, risk ratings,
• 🔐 Security Questionnaire Answer Drift AuditorCompare incoming security questionnaire answers with an approved library for stale evidence, scope mismatch, dropped citations and material wording drift.
• Audit Evidence Collection and Readiness AgentMaps audit requests to internal controls, identifies required supporting evidence, organizes records from approved sources, detects missing, stale, incomplete,
• Audit Evidence Request BuilderCreates audit PBC lists, evidence request emails, document trackers, follow-up wording, request prioritisation, ownership logs, status summaries, escalation lan
• Contract & Terms Risk Spotting GateAn adversarial reviewer that reads a contract, agreement, or terms-of-service and flags one-sided, risky, vague, or missing clauses, then returns a LOW RISK / R
• Data Breach Response ManagerA structured response manager for personal data breaches, handling triage, timelines and notification decision support.