The Agent Skills Directory

[COMMAND_EXECUTION]: The provided Python script executes standard, well-known security auditing tools (npm audit and pip-audit) using subprocess.run. This is a legitimate and documented functionality intended to help identify vulnerabilities in project dependencies.
[SAFE]: The skill follows security best practices by recommending the use of environment variables for secrets, parameterized queries for database operations, and constant-time comparisons for password verification. No evidence of obfuscation, exfiltration, or prompt injection was found.

agency-application-security-engineer