The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructs the agent to perform standard development tasks such as running tests and using Git commands (git diff --check, git diff --numstat) to verify the integrity of the test suite and production code during the audit process. These operations are aligned with the skill's primary purpose.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and audit external data, specifically source code and test files. While this creates an inherent attack surface for indirect prompt injection (where malicious instructions could be embedded in the audited files), the skill itself consists of safety-conscious guidelines and does not contain logic that would facilitate such an attack beyond its intended scope.
[SAFE]: The provided instructions follow industry best practices for test-driven development and code refactoring. There are no signs of credential exposure, data exfiltration, or obfuscation.

test-audit