The Agent Skills Directory

[SAFE]: The skill is designed for security auditing of project dependencies. It uses well-known, native audit tools such as npm audit, pip-audit, cargo audit, and govulncheck to identify risks.
[SAFE]: The instructions contain strong safety constraints, explicitly stating that the skill should never auto-install missing audit tools, auto-apply upgrades, or modify lock-files. Missing tools are reported as unavailable rather than being installed at runtime.
[SAFE]: The skill adheres to a read-only workflow, focused on data collection and analysis. It references trusted sources such as the GitHub Advisory Database, CISA Known Exploited Vulnerabilities catalog, and SPDX license lists.
[SAFE]: No obfuscation, persistence mechanisms, or privilege escalation attempts were detected. The use of shell commands is strictly limited to standard diagnostic and auditing utilities.

review-deps