The Agent Skills Directory

[COMMAND_EXECUTION]: The skill contains several shell scripts (e.g., audit-typescript-repo.sh, audit-typescript-dead-code.sh) designed to execute local development tools such as the TypeScript compiler (tsc), oxlint, and fallow within a target project's directory. This behavior is directly aligned with the skill's stated purpose of providing codebase auditing capabilities.
[INDIRECT_PROMPT_INJECTION]: The skill establishes an attack surface by ingesting and analyzing external source code from a repository. The refactoring and review instructions (found in prompts/cleanup-module-rewrite.md and prompts/review-structural-slop.md) process this untrusted data to provide feedback. The instructions include standard maintainability principles and are evaluated as a standard operational risk within the context of an auditing tool.
[EXTERNAL_DOWNLOADS]: The documentation references external resources and installation commands for tools like fallow and the skill itself via npx. These references target official GitHub repositories and the npm registry, which are recognized as well-known and expected sources for development tooling.

maintainable-typescript