The Agent Skills Directory

[SAFE]: The skill is a well-structured auditing framework that facilitates domain-specific reviews (Security, Privacy, Compliance, Design, Resilience, Performance, SEO, and GEO). Its operations, including reading codebase metadata and executing standard audit commands like npm audit, are appropriate for its functional scope.
[SAFE]: Data handling practices are consistent with the skill's stated purpose. It saves findings and regression tests to dedicated directories (shiplight/reports/ and shiplight/tests/), which follow standard patterns for vendor-specific tooling output.
[SAFE]: The skill utilizes browser-based validation via a live target session to identify common web vulnerabilities (XSS, insecure cookies, missing security headers). These automated tests use non-destructive payloads (e.g., alert(1)) intended for detection and reporting rather than exploitation.
[SAFE]: No malicious patterns such as obfuscation, unauthorized data exfiltration to third-party domains, persistence mechanisms, or privilege escalation were detected across the skill's instructions or reference documentation.

review