The Agent Skills Directory

[SAFE]: The skill provides documentation and command examples for industry-standard security scanning tools (Trivy, Checkov, and pip-audit) to audit container images, Infrastructure-as-Code (IaC), and software dependencies.
[INDIRECT_PROMPT_INJECTION]: The skill possesses an ingestion surface as it processes external data from the local file system (Terraform, Kubernetes, and Python requirement files) and security tool findings. While explicit boundary markers and sanitization are not defined, the capability inventory is limited to standard security CLI execution, which is consistent with the skill's primary purpose and does not present an elevated risk.

infrastructure-scanning