The Agent Skills Directory

[COMMAND_EXECUTION]: The PowerShell script scripts/audit-deps.ps1 executes standard package management CLI tools (dotnet, pip, npm) to retrieve information about outdated and vulnerable packages. These operations are restricted to the local filesystem and the official package registries associated with those tools.
[EXTERNAL_DOWNLOADS]: The skill documentation and script recommend the use of reputable security tools such as pip-audit and npm audit. These tools fetch data from well-known vulnerability databases (e.g., NVD, GitHub Advisory Database) which is standard practice for dependency management.
[DATA_EXPOSURE]: The analysis confirms that the skill does not attempt to access sensitive configuration files (e.g., .ssh, .aws, .env) or exfiltrate data to external domains. Communication is limited to official package registries during the audit process.
[SAFE]: The skill serves as an educational and utility resource for improving project security. No obfuscation, persistence mechanisms, or malicious command patterns were detected.

dependency-management