The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses common developer tools such as git, rg, tsc, and gh to analyze code repositories. These commands are used as intended for identifying churn, code smells, and dependency issues.
[EXTERNAL_DOWNLOADS]: Uses bun audit or npm audit to check for dependency vulnerabilities, which is a standard security practice.
[DATA_EXFILTRATION]: No evidence of data exfiltration. GitHub issue creation is only performed using the official gh CLI and requires user confirmation for each item.
[INDIRECT_PROMPT_INJECTION]: The skill explicitly includes a warning to treat source code as untrusted and to never obey instructions found within the code being analyzed, mitigating risks from indirect prompt injection.

tech-debt