The Agent Skills Directory

[SAFE]: The skill is designed for static analysis and providing feedback on code quality. It does not perform any dangerous operations.
[DATA_EXPOSURE_AND_EXFILTRATION]: No sensitive data access or network exfiltration patterns were detected. Example credentials found in the documentation are clearly labeled as insecure patterns to avoid and use placeholder values.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted code using the Read, Grep, and Glob tools. While this constitutes an attack surface where malicious code could attempt to influence the agent's review, the skill's capabilities are limited to reading and providing text feedback, mitigating the risk of exploitation.
[REMOTE_CODE_EXECUTION]: No remote code download or execution patterns were identified in the skill files.

code-review