The Agent Skills Directory

[COMMAND_EXECUTION]: The skill includes a local Python script scripts/audit_schedule_optimizer.py designed to be executed via the command line. The script uses standard libraries and performs purely mathematical and logical operations to generate audit schedules based on risk factors.
[INDIRECT_PROMPT_INJECTION]: The audit_schedule_optimizer.py script ingests user-provided data from a processes.json file. While this constitutes a data ingestion surface, the script uses safe parsing (json.load) and its output is used for scheduling purposes rather than being executed as instructions, posing no significant security risk.
[DATA_EXPOSURE]: No sensitive file paths, hardcoded credentials, or unauthorized network operations were identified across any of the files.
[REMOTE_CODE_EXECUTION]: All code is local to the skill. There are no patterns involving remote script downloads, package installations from unknown sources, or dynamic code execution via eval() or exec().
[OBFUSCATION]: The content is written in clear Markdown and standard Python. No Base64, zero-width characters, homoglyphs, or other encoding techniques were found.

qms-audit-expert