The Agent Skills Directory

Static Code Analysis: The skill employs a specialized script to perform static analysis of the project's TypeScript source files. By using the standard TypeScript compiler API, it identifies console calls and logger methods to inventory potential data exposure points.
Local Execution and Data Handling: All analysis and remediation tasks are performed locally within the user's checkout. The inventory results are directed to temporary files on the local system, and no unauthorized network communication or external data exfiltration patterns were identified.
Structured Audit Workflow: The instructions establish a rigorous process for verifying potential leaks, including requirements for source-to-sink tracing and adversarial regression testing. This systematic approach ensures that code changes are focused and verified.
Data Ingestion Surface: As an auditing tool, the skill naturally processes the project's source code. While source code content is a common ingestion surface for indirect instructions, the skill's narrow focus on specific logging patterns and its requirement for manual classification by the agent reduce the risk associated with this surface.
Standard Dependencies: The script utilizes the typescript package, which is an industry-standard tool for the static analysis of JavaScript and TypeScript codebases. The use of this dependency is consistent with the skill's primary function.

sensitive-logging-audit