The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: Fetches reputable security tools like Trivy and Gitleaks from their official GitHub repositories for setup. CI workflow templates include SHA256 checksum verification for downloaded binaries to ensure integrity.- [COMMAND_EXECUTION]: Extensively uses Bash scripts to orchestrate the execution of various static analysis tools. The skill provides clear guidance on tool prerequisites and includes built-in detection for environment readiness (DDEV, Node.js).- [DATA_EXFILTRATION]: Specifically designed to scan for secrets while ensuring the secrets themselves are never logged or persisted in cleartext. Matched values are handled in-memory and redacted from output files using the tools' native redaction flags. Resulting audit reports are stored in isolated directories outside the project root to prevent accidental commitment.- [INDIRECT_PROMPT_INJECTION]: As an auditing skill, it ingests untrusted code for analysis. It mitigates injection risks by using structured data formats (JSON) for tool communication and maintaining clear boundaries between scanner output and agent instructions.- [DYNAMIC_EXECUTION]: Programmatically generates necessary configuration files (like rector.php or psalm.xml) from safe local templates during the setup process to ensure tools are correctly tuned for the detected project layout.

code-quality-audit