The Agent Skills Directory

[COMMAND_EXECUTION]: The scanner script scripts/scan.py executes local shell commands including git and bash, and uses the uv tool to run pytest. These executions are necessary for the skill's primary function of auditing the repository's state, tracking changes, and running existing privacy tests.
[PERSISTENCE]: The skill includes an installation script scripts/install-pre-push.sh that writes a pre-push hook to the repository's .git/hooks/ directory. This persistence mechanism is a standard feature for developer tools aimed at automating security checks during the git workflow.
[INDIRECT_PROMPT_INJECTION]: The scanner processes repository data, including file contents and git diffs, which could contain untrusted instructions. While the scanner presents these snippets to the agent, the risk is mitigated by the scanner's redaction logic (masking matched secrets) and the clear decision-tree instructions provided in SKILL.md for handling findings.

compliance-scan