The Agent Skills Directory

[SAFE]: The skill is a high-level workflow orchestrator and does not contain any executable code, shell scripts, or network operations directly.
[PROMPT_INJECTION]: No attempts to bypass safety filters or override system instructions were found. In fact, the skill implements a 'Mandatory confirmation gate' that requires the agent to wait for explicit user confirmation and proof of authorization before performing any active testing.
[DATA_EXFILTRATION]: No hardcoded credentials, sensitive file access patterns (e.g., accessing .ssh or .aws directories), or network exfiltration commands were detected.
[REMOTE_CODE_EXECUTION]: The skill references other tools and skills (e.g., metasploit-framework, sql-injection-testing) but does not perform any unverified downloads or execute remote scripts via curl/bash patterns.
[OBFUSCATION]: No obfuscated content, Base64 encoding, or hidden characters were detected in the instructions or metadata.

security-audit