The Agent Skills Directory

[NO_CODE]: The skill consists exclusively of instructions and markdown templates. It does not include any executable scripts, binaries, or automated shell commands.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to read and process markdown files from the local .claude/ directory. This constitutes a data ingestion surface where external instructions could be present. However, the skill acts only as an analyzer and reporter, presenting findings to the user for confirmation rather than executing the content of the audited files.
[DATA_EXFILTRATION]: While the skill accesses potentially sensitive configuration rules, it lacks any network capabilities, URLs, or commands that could be used to transmit data to an external source.

claude-audit