The Agent Skills Directory

[SAFE]: The skill performs static analysis on local project files to identify potential security vulnerabilities in dependencies. It reads dependency lists from project.yaml and searches source code for relevant imports and call sites.
[SAFE]: No network operations, data exfiltration, or credential access were identified in the instructions. The skill only interacts with local files within the project root and tracking directories.
[SAFE]: The file operations, including reading source code and writing a coverage report in YAML format, are consistent with the skill's stated purpose of attack-surface discovery.
[SAFE]: There are no signs of obfuscation, remote code execution, or attempts to bypass safety guidelines. The instructions provided are clear and follow standard security auditing practices.

triage-dependencies