The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses several shell commands (grep, find, npm audit, pip-audit, cargo audit) to perform static analysis on the codebase. These are standard tools for security auditing and code quality assessment.
[CREDENTIALS_UNSAFE]: The skill includes grep patterns designed to detect hardcoded credentials, API keys (e.g., sk-, ghp_, AKIA), and sensitive files (.env, .pem, .key). This is its intended primary purpose as an auditing tool and does not represent a credential leak in the skill itself.
[EXTERNAL_DOWNLOADS]: Uses npx to execute tools like npm-check and madge, and calls pip-audit, cargo audit, and govulncheck. These are well-known security and maintenance utilities from official registries.
[SAFE]: The skill is designed for engineering consulting and codebase health assessment. Its operations are read-only regarding codebase analysis and provide actionable remediation advice in the form of a 'Progression Plan'.

audit-codebase