The Agent Skills Directory

[SAFE]: No malicious patterns or security vulnerabilities were detected in the skill instructions or configuration.
[PROMPT_INJECTION]: The skill utilizes disable-model-invocation: true, a security control that prevents the AI agent from triggering the tool autonomously, ensuring it only runs when explicitly invoked by the user.
[DATA_EXFILTRATION]: The skill includes hard rules explicitly forbidding access to sensitive files such as .env, secrets, or the .git/ directory.
[COMMAND_EXECUTION]: While the skill uses Bash and Task tools, it implements strict safety protocols including a mandatory 'token handshake' for destructive actions where the user must type the object name verbatim to confirm.
[DATA_EXPOSURE_AND_EXFILTRATION]: The instructions explicitly state 'No fabrication' of credentials or statistics, reducing the risk of accidental secret generation or exposure.

fix