The Agent Skills Directory

[SAFE]: The skill's primary function is to provide an instructional framework for the AI agent to conduct deep, granular code analysis. It does not contain any executable code, scripts, or binary files.
[SAFE]: No external network operations, data exfiltration patterns, or hardcoded credentials were found in the instructions or reference files.
[SAFE]: The skill does not define any external dependencies (Python or Node.js packages) and does not attempt to download or execute remote scripts.
[SAFE]: No obfuscation techniques, such as Base64 encoding of commands or zero-width characters, were detected in any of the analyzed files.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted code provided by users for the purpose of auditing. While this creates a surface for indirect prompt injection via the analyzed data, the skill does not grant the agent dangerous capabilities that could be exploited.
Ingestion points: Untrusted source code files provided by the user (as described in SKILL.md).
Boundary markers: The skill enforces a strict, structured output format (defined in OUTPUT_REQUIREMENTS.md) and requires line-number citations, which helps maintain context stability and separate user data from agent instructions.
Capability inventory: The skill documentation does not utilize tools for network access, file system modifications, or subprocess execution.
Sanitization: No explicit sanitization of the input code is defined, relying instead on the structured analysis posture and anti-hallucination rules to mitigate accidental instruction obedience.

audit-context-building