The Agent Skills Directory

[SAFE]: No security issues were detected. The skill implementation follows secure practices for its intended purpose of repository inspection and report generation.\n- [COMMAND_EXECUTION]: The skill uses subprocess.run to orchestrate internal scripts for validation and sealing. This execution is protected by path resolution checks that restrict operations to the skill's own directory.\n- [DATA_EXPOSURE]: The check_optimization.py script reads source files from the target repository to verify line-level anchors for performance claims. This is a controlled read operation limited to verification.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests potentially untrusted markdown drafts in scripts/seal_optimization.py. It provides a validation layer via scripts/check_optimization.py which enforces a strict schema (boundary markers) defined in references/optimization-contract.json. The skill's capabilities are limited to repository inspection and writing a single handoff file, utilizing structural validation as a primary defense against malformed inputs.

optimize-codebase