The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes shell commands via grep, git, npm, and pip to perform technical analysis of the codebase, which is consistent with its stated purpose of security auditing.
[EXTERNAL_DOWNLOADS]: It leverages npm audit, npx audit-ci, and pip-audit to fetch vulnerability data from official, well-known package registries. These interactions are standard for security verification and target trusted infrastructure.
[SAFE]: The skill's identification of sensitive file paths and credential patterns is part of a legitimate security review process intended to help users identify and mitigate risks. No evidence of data exfiltration or malicious intent was detected.

security-audit-codebase