The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes standard, non-destructive shell commands including ls, cat, and grep to perform reconnaissance on the local filesystem and identify project configuration and API routes.
[EXTERNAL_DOWNLOADS]: The instructions reference several external security frameworks and dynamic application security testing (DAST) tools such as ZAP-CLI, Nuclei, and Nikto as part of the audit methodology; however, it does not include any automated installation or download scripts.
[SAFE]: No malicious patterns, data exfiltration, or unauthorized privilege escalation attempts were detected. The skill's behavior is transparent and aligns with its documented purpose as a security auditing utility.

pentest