The Agent Skills Directory

[SAFE]: The skill is a legitimate tool for conducting privacy audits. It provides structured instructions for identifying personal data, mapping data flows, and validating consent mechanisms within a web application. Its behavior aligns with its stated purpose of security and privacy testing.
[SAFE]: While the skill scans for and identifies PII such as email addresses and phone numbers, this is performed within the context of a requested privacy review. The collected findings are used to generate audit reports and regression tests in the local 'shiplight/' directory, which is a vendor-controlled namespace. No unauthorized data exfiltration or hardcoded credentials were detected.
[SAFE]: The skill leverages browser automation tools to interact with and inspect target web applications. These actions (e.g., monitoring network requests, reading console logs) are scoped to the browser environment and are necessary for its auditing functionality. No attempts to execute arbitrary shell commands or acquire elevated privileges were observed.

privacy-review