The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides standard command-line instructions for installing 'trivy' via the Homebrew package manager and executing vulnerability scans on container images, filesystems, and Infrastructure-as-Code (IaC) files.
[EXTERNAL_DOWNLOADS]: Instructions reference the installation of a legitimate, open-source security tool from official package registries.
[INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface by scanning local filesytems and container images. However, the risk is mitigated because the tool used (Trivy) is a specialized security scanner designed to safely parse such data.
Ingestion points: SKILL.md (Step 3 and Step 4 filesystem and configuration scans).
Boundary markers: Absent.
Capability inventory: Execution of the trivy binary for scanning; no network exfiltration or unauthorized file-write capabilities are established.
Sanitization: The core purpose of the skill is security auditing, and the referenced tool is specifically built to handle untrusted input files safely.

trivy