The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes system commands via subprocess.run and provided shell scripts to perform dependency audits and remediation tasks. It invokes standard ecosystem tools such as npm audit, safety, govulncheck, and cargo audit within the specified project directory.
[EXTERNAL_DOWNLOADS]: The skill's implementation playbook provides instructions for installing established security utilities from official package registries, including snyk, safety, and pip-audit. These tools are well-known and trusted within the developer community.
[DATA_EXFILTRATION]: Dependency audit tools included in the skill perform network requests to official vulnerability databases (e.g., OSV, NPM Registry) to identify package risks. This behavior is a standard operational requirement for its primary purpose and no unauthorized exfiltration of sensitive data was detected.

security-scanning-security-dependencies