The Agent Skills Directory

[SAFE]: The skill provides high-quality educational content, including checklists and principles derived from the OWASP Top 10:2025 standards.\n- [COMMAND_EXECUTION]: The scripts/security_scan.py script executes the npm audit command via the Python subprocess module to check for dependency vulnerabilities.\n
The execution uses a hardcoded command list and is restricted to the specific task of security auditing, presenting no evidence of command injection or malicious use.\n- [EXTERNAL_DOWNLOADS]: The dependency auditing feature relies on external network access to retrieve vulnerability data from the official NPM registry, which is standard and expected behavior.\n- [SAFE]: Secret scanning and code pattern analysis are performed locally using regular expression matching against file contents; no data exfiltration or unauthorized network communication was detected.

vulnerability-scanner