The Agent Skills Directory

[PROMPT_INJECTION]: No malicious instructions or safety bypass attempts were detected. The skill focuses solely on its stated goal of code duplication analysis.
[DATA_EXFILTRATION]: No network operations or sensitive file access patterns (e.g., access to .ssh, .env, or credentials) were found. The skill only reads source code for structural analysis.
[REMOTE_CODE_EXECUTION]: There are no patterns indicating the download or execution of remote scripts or unverifiable packages.
[COMMAND_EXECUTION]: No shell command execution or privilege escalation (sudo/chmod) patterns are present in the skill or its references.
[OBFUSCATION]: No Base64, hex-encoding, zero-width characters, or other obfuscation techniques were detected in the instructions or templates.
[DYNAMIC_EXECUTION]: The skill does not generate or execute code at runtime. It produces static Markdown reports based on code analysis.
[INDIRECT_PROMPT_INJECTION]: While the skill ingests codebase content which could contain untrusted data, the skill's capabilities are limited to reading files and generating a text report. It lacks the execution or write capabilities necessary to exploit an indirect injection.
Ingestion points: Reads candidate modules and functions from the local codebase (SKILL.md, references/03_PROCEDURE.md).
Boundary markers: None explicitly defined for untrusted code ingestion.
Capability inventory: Limited to file read access and Markdown output generation. No subprocess, exec/eval, file-write, or network operations.
Sanitization: No explicit sanitization of code content before inclusion in the report.

audit-structural-duplication