The Agent Skills Directory

[SAFE]: The skill consists primarily of educational content and documentation templates for security compliance and vendor risk management. All instructions follow standard industry practices (OWASP, NIST) and provide legitimate guidance for founders and security teams.- [SAFE]: The included Python script scripts/check-output.py is a benign utility that validates the length and keyword content of local files. It performs read-only operations without any network connectivity or dynamic code execution.- [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided information such as company names and dates to populate security templates. While there are no explicit sanitization routines or boundary markers, the skill lacks the dangerous capabilities (network access, file-writing, or system modification) required to exploit this surface, resulting in no practical risk.- [SAFE]: All external tools (Snyk, Semgrep, HackerOne, etc.) and frameworks (OWASP, ISO 27001) mentioned are well-known, reputable industry standards and are referred to strictly for documentation purposes.

security-assessments