The Agent Skills Directory

[SAFE]: No malicious patterns or security vulnerabilities were detected in the skill instructions. The skill's behavior is consistent with its stated purpose of analyzing codebases for documentation purposes.
Capability Analysis: The skill uses standard file system discovery to map directory structures and identify technology stacks.
Data Privacy: No instructions for exfiltrating data or accessing sensitive environment variables were found.
Indirect Prompt Injection Analysis: The skill reads untrusted codebase files (package manifests, source code, git logs) but lacks boundary markers or sanitization for this data. However, because it only performs structural analysis and generates documentation without high-privilege execution, the risk is negligible.

codebase-onboarding