The Agent Skills Directory

[COMMAND_EXECUTION]: The checker utility (checker/check.py) utilizes subprocess.run to call git ls-files. This is a legitimate local operation used to verify whether sensitive files, such as .env files, are mistakenly tracked in the version control system, which is a core part of its security auditing function.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted project files to perform its analysis. Ingestion points include configuration files (YAML, JSON, PHP) and project infrastructure files (Dockerfile, CI pipelines) read in checker/check.py. The capability inventory includes file reads and executing git via subprocess.run. Sanitization is provided by using yaml.SafeLoader for YAML parsing and standard JSON loaders.

typo3-site-conformance