The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/buried_facts.py executes shell commands using subprocess.run(). Specifically, it runs git ls-files to list source files and git diff to identify modified lines when the --since flag is used. These operations are limited to project metadata and are consistent with the skill's stated purpose of codebase analysis.
[REMOTE_CODE_EXECUTION]: The skill does not download or execute remote code. All scripts are provided within the skill package.
[DATA_EXFILTRATION]: There are no network operations or exfiltration patterns detected. The script reads local source files for analysis purposes only.
[CREDENTIALS_UNSAFE]: No hardcoded credentials, API keys, or sensitive environment paths were identified in the source code or instructions.
[DYNAMIC_CONTEXT_INJECTION]: The skill does not use dynamic load-time command execution patterns.
[OBFUSCATION]: No obfuscated strings, hidden URLs, or suspicious encoding techniques were found.

facts-as-data