The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructs the agent to run several terminal commands for auditing repositories. This includes trivy for vulnerability/secret scanning, zizmor for GitHub Actions workflow analysis, and standard build tool commands like ./gradlew dependencyCheckAnalyze and npm audit. These are standard tools for security analysis and are used in accordance with the skill's stated purpose.
[SAFE]: The skill promotes secure development practices through extensive examples for preventing SQL injection (parameterized queries), PII exposure in logs, and hardcoded credentials. It also includes configuration guidance for Nais network policies and security headers, aligning with industry standards.

security-review