The Agent Skills Directory

[SAFE]: The skill provides high-quality documentation and utility scripts that align with the stated purpose of security leadership advisory.
[PROMPT_INJECTION]: The skill instructions specify reading from company-context.md. While this is an ingestion surface for indirect prompt injection, the skill lacks high-risk capabilities such as network access or privilege escalation that could be leveraged maliciously.
[COMMAND_EXECUTION]: The provided Python scripts (risk_quantifier.py and compliance_tracker.py) were analyzed for security risks. They use only standard library modules and perform no unauthorized system operations, restricted solely to local data processing and user-initiated CSV exports.

ciso-advisor