The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/lint_runner.py uses subprocess.run to execute linter commands such as npm run lint, npx eslint, ruff check, and mypy. These commands are invoked using argument lists (avoiding shell injection) and are restricted to a defined set of hardcoded development tools. This is standard and expected functionality for a validation skill.
[SAFE]: No malicious patterns such as data exfiltration, remote code execution, or obfuscation were detected. The skill operates locally on project files and relies on established ecosystem tools to perform its tasks.
[DATA_EXPOSURE]: The skill reads project configuration files (e.g., package.json, pyproject.toml) and source code files to perform its analysis. This access is necessary for the stated purpose of linting and type checking. No sensitive file paths, such as .ssh directories or .env files, are targeted for access or exfiltration.

lint-and-validate