The Agent Skills Directory

COMMAND_EXECUTION (LOW): The skill suggests running several commands to analyze code, including cargo clippy, cargo audit, and various grep patterns.
Evidence:
cargo clippy -- -W clippy::all in Section 3.
cargo audit in Section 4.
Multiple grep commands for identifying tests, magic numbers, and error handling patterns.
Risk: Running cargo clippy on an untrusted codebase can trigger the execution of arbitrary code if the project contains malicious build.rs scripts or procedural macros. However, this is consistent with the primary purpose of the skill (auditing a codebase) and is a standard risk for developers in this ecosystem.
DATA_EXPOSURE (SAFE): No hardcoded credentials or sensitive file paths (e.g., SSH keys, AWS configs) were identified. The network operations are limited to cargo audit which checks a vulnerability database.
PROMPT_INJECTION (SAFE): No instructions attempt to override agent behavior, bypass safety filters, or extract system prompts. The language is purely instructional for the assessment task.
OBFUSCATION (SAFE): No Base64, zero-width characters, or encoded strings were found in the skill content.

multiversx-project-culture