The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides numerous examples for executing developer tools such as clang-tidy, cppcheck, scan-build, cmake, and bear. These are standard command-line utilities used for C/C++ development and code quality assessment.
[EXTERNAL_DOWNLOADS]: In SKILL.md, the workflow suggests installing compiledb via pip install compiledb. This is a routine operation for developers needing to generate a compilation database for Make-based projects and uses the official Python package registry.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze C/C++ source code provided by the user. While this constitutes processing untrusted external data, the skill uses standard static analysis tools to process this data, and no specific exploitation surface for prompt injection was identified.
Ingestion points: C/C++ source files and build configuration files (e.g., compile_commands.json).
Boundary markers: None explicitly defined in the prompts.
Capability inventory: Execution of static analysis binaries (clang-tidy, cppcheck) via shell commands.
Sanitization: None provided; the skill relies on the underlying static analysis tools to handle code parsing.

static-analysis