The Agent Skills Directory

[SAFE]: The skill is a legitimate development tool for maintaining code consistency. Its primary functions are reading project files to find duplicated constants and updating documentation comments, which are standard programming tasks.- [COMMAND_EXECUTION]: The instructions direct the agent to use shell-based tools like Grep and ripgrep to perform global searches for constant values, named symbols, and composite expressions within the repository.- [PROMPT_INJECTION]: There is a potential surface for indirect prompt injection because the skill reads content from the codebase, such as comments and strings. An attacker could theoretically embed instructions in comments that are processed during an audit. However, this risk is inherent to all auditing tools and is mitigated by the skill's focus on specific value patterns and developer oversight of the resulting reports.

audit-coupled-constant