The Agent Skills Directory

[COMMAND_EXECUTION]: The skill documents the use of standard security command-line tools such as trufflehog, trivy, and git-secrets for identifying vulnerabilities and hardcoded secrets in repositories.
[EXTERNAL_DOWNLOADS]: Instructions include installation commands for common security utilities via official package managers like Homebrew (brew install git-secrets).
[DATA_EXPOSURE]: Provides a list of sensitive file patterns (e.g., .env, *.pem, *.key) and credential string formats (e.g., AWS access keys, OpenAI keys) to be used as search criteria during security audits and for configuring pre-commit hooks.
[SAFE]: The skill's primary function is to enhance the security posture of projects through structured audits and the implementation of established security headers, policies, and hardening techniques. No malicious patterns or bypass attempts were detected.

security-review