The Agent Skills Directory

[SAFE]: The skill performs legitimate business modeling functions. Comprehensive analysis of the instructions and scripts did not reveal any malicious patterns, obfuscation, or unauthorized data access.- [COMMAND_EXECUTION]: The skill includes a Python script (scripts/scenario_modeler.py) for interactive scenario building. The script is self-contained, using only standard library imports (json, sys, dataclasses, typing, enum). It lacks capabilities for network communication, file writing, or subprocess execution, limiting its activity to local terminal interactions.- [DATA_EXPOSURE_AND_EXFILTRATION]: No hardcoded credentials, sensitive file paths (e.g., .ssh, .aws), or exfiltration vectors were identified. The tool operates on user-provided business metrics within the local environment.- [INDIRECT_PROMPT_INJECTION]: The skill possesses a very low attack surface. While it ingests user input via the interactive_mode in the Python script, it lacks the dangerous capabilities (network, write, exec) required to weaponize an indirect injection attack.

scenario-war-room