The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes git commands and a local shell script scripts/diff-base.sh to determine the merge base and generate diff stats. These are standard development operations within a local repository context.
[SAFE]: The skill provides structured guidance for detecting common security flaws (SQL injection, XSS, SSRF, Shell Injection) during the manual review process. It does not perform these injections itself but rather instructs the AI agent on how to find and mitigate them in the code being reviewed.
[SAFE]: The use of shell variables in scripts/diff-base.sh is handled safely for the intended purpose of git operations, and the script includes checks to ensure it is running within a git repository.

gstack-review