The Agent Skills Directory

[COMMAND_EXECUTION]: The skill implements a variety of security scanning workflows by wrapping industry-standard CLI tools through the subprocess module. Evidence: Scripts such as audit_dependencies.py, audit_infrastructure.py, sast_scan.py, and scan_vulnerabilities.py execute tools including pip-audit, npm, tfsec, semgrep, bandit, and safety. Evidence: scripts/scan_containers.py executes docker build and trivy to perform container security assessments.- [EXTERNAL_DOWNLOADS]: The skill includes functionality for dynamic security testing which involves network interaction with specified targets. Evidence: scripts/dast_scan.py orchestrates scans using zap-cli, nikto, and sqlmap against user-provided target URLs to identify vulnerabilities in running applications.- [DATA_EXFILTRATION]: While several scripts are designed to locate sensitive information (e.g., detect_secrets.py and review_config.py), these tools are configured to output results locally for the user. No evidence of unauthorized data transmission or exfiltration to external domains was found.

security-auditor