The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/security_scan.py utilizes the subprocess module to execute npm audit. This is a legitimate operation designed to fetch vulnerability data for Node.js dependencies. The execution is limited to a specific, predefined command and does not use shell=True, mitigating common command injection risks.
[SAFE]: The skill provides structured guidance and checklists for auditing applications against the OWASP Top 10:2025. This content is purely informational and follows industry security best practices.
[SAFE]: The Python utility scripts/security_scan.py performs static analysis using regular expressions to detect secrets (API keys, cloud credentials) and dangerous functions (eval, unsafe deserialization). The script operates entirely on the local file system and does not transmit data to external servers.
[SAFE]: No obfuscation, persistence mechanisms, or unauthorized privilege escalation attempts were found in the provided files.

vulnerability-scanner