The Agent Skills Directory

[SAFE]: No malicious patterns or security vulnerabilities were identified in the skill files.
[COMMAND_EXECUTION]: The skill provides instructions for the agent to run various static analysis and security tools (e.g., lizard, radon, tfsec, and various npx packages). These are well-known industry-standard tools for code auditing and are used appropriately for the skill's stated purpose.
[CREDENTIALS_UNSAFE]: The skill includes regular expressions designed to detect hardcoded credentials and secrets during a security audit. These patterns are for identifying vulnerabilities in the user's code, not for stealing or exposing the agent's or user's own credentials.
[EXTERNAL_DOWNLOADS]: The documentation references standard package managers (npm, PyPI) and established security tool repositories. There are no patterns suggesting the download or execution of scripts from unverified or untrusted remote sources.

code-quality