The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses standard shell commands like grep, npm, and npx to analyze local source code and manage development dependencies. These operations are within the scope of its documented purpose for documenting codebases.
[EXTERNAL_DOWNLOADS]: Uses npx to run common developer utilities such as swagger-jsdoc and ts-to-openapi. These are well-known tools used for generating API specifications and do not pose a security risk in this context.
[REMOTE_CODE_EXECUTION]: An automated alert flagged a potential RCE via curl | python. Analysis confirms this is a false positive; the command curl -s http://localhost:3000/api/health | python -m json.tool uses the standard Python json.tool module to pretty-print data and does not execute the received content as code.

api-documentation