The Agent Skills Directory

[SAFE]: The skill consists of template scripts and reference documentation for QA workflows. A thorough review of the implementation details found no malicious behaviors, obfuscation, or unauthorized access patterns.
[INDIRECT_PROMPT_INJECTION]: The skill's primary function is to analyze project code, which involves processing untrusted external data. While this presents a surface for indirect prompt injection, it is a necessary part of the skill's utility, and no exploitable handling of this data was found in the current scripts.
Ingestion points: target parameter in the analysis scripts (e.g., scripts/coverage_analyzer.py).
Capability inventory: Instructions mention reviewing recommendations and applying fixes, but scripts currently lack dangerous execution capabilities.
Boundary markers: None present.
Sanitization: Not applicable to the current placeholder implementation.

senior-qa