The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes the hig-doctor utility via npx or bun to perform scans on project directories. These commands are necessary for the skill's primary function of auditing codebases.
[EXTERNAL_DOWNLOADS]: It uses npx to fetch and run the hig-doctor package from the NPM registry. This package is a vendor-owned resource belonging to raintree-technology and is used according to its documented purpose.
[PROMPT_INJECTION]: The skill processes untrusted external data (project source code and configuration files) which creates a surface for indirect prompt injection. While malicious content in a scanned project could theoretically attempt to influence the agent's summary of the audit, this is a known risk factor common to all codebase analysis tools.

hig-doctor-audit