The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill references and provides commands to install the uv package manager from its official domain (astral.sh). This is a well-known and trusted technology service in the Python ecosystem.
[COMMAND_EXECUTION]: The skill includes several Python scripts in the scripts/ directory designed for local code auditing. One script (audit-applied-migrations.py) utilizes the subprocess module to execute local git commands (rev-parse, ls-tree, show) to verify migration history. This behavior is expected and appropriate for a development auditing tool.
[DATA_EXFILTRATION]: The skill includes a security-focused script (audit-settings-secrets.py) that performs static analysis to detect and prevent the inclusion of hardcoded secrets in settings files. No credential exfiltration or unauthorized data access patterns were detected.
[REMOTE_CODE_EXECUTION]: The installation command for the uv package manager (curl -LsSf https://astral.sh/uv/install.sh | sh) is a standard installation pattern for this well-known developer tool and originates from a trusted vendor.

python-weapon