The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The testing framework in scripts/tests/test_analyze_residual_edge.py uses subprocess.run to verify the command-line interface functionality. This call is restricted to invoking the local Python interpreter (sys.executable) on the skill's own script with controlled arguments, which is a standard and secure testing practice.
[DYNAMIC_EXECUTION]: The file scripts/tests/conftest.py utilizes importlib.util to load the analysis script as a module for pytest. This dynamic loading is used solely for isolating the test environment and does not involve executing untrusted or remote code.
[INDIRECT_PROMPT_INJECTION]: The skill possesses an ingestion surface for untrusted data via CSV and JSON files. However, the script implements strict numeric conversion (e.g., float(value)) and data validation (e.g., ISO date checks) before processing. The output is a structured report, and there is no evidence of user-supplied data being interpolated as executable instructions for the agent.
[DATA_EXFILTRATION]: No network operations or unauthorized file system access patterns were detected. The script relies on the Python standard library and only interacts with file paths explicitly provided through command-line arguments.

residual-edge-analyzer