The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides instructions for utilizing standard security auditing utilities, such as npm audit, pip-audit, govulncheck, and cargo audit, to identify known vulnerabilities in project dependencies.
[EXTERNAL_DOWNLOADS]: Dependency auditing is facilitated through well-known services and official registries, such as using npx to run the socket-security audit tool. These references target established security vendors and do not introduce untrusted remote code.
[INDIRECT_PROMPT_INJECTION]: As a security review tool, the skill is designed to process untrusted source code. It mitigates the risk of indirect injection by enforcing a structured workflow consisting of mapping, auditing, and deep-review phases, which provides strong context boundaries for the agent.

security-review