The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides grep commands to help auditors find network request functions in source code. These commands are diagnostic and used within the local environment.
[SAFE]: The automated security alert for references/sinks.md (HttpRequest-inf) is a heuristic detection of the HTTP request function names (e.g., fetch, axios, requests) listed in a reference table. These are legitimate auditing patterns given the skill's purpose.
[SAFE]: Content within poc-skeleton.md contains example code and URLs for cloud metadata services (e.g., AWS, GCP, Azure). These are instructional templates for security professionals and are not executed or accessed by the skill's operational logic.

ssrf