The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill facilitates the installation of standard dead-dependency analysis tools, such as knip, vulture, and cargo-machete, from their respective official package registries (NPM, PyPI, and Crates.io). These downloads are necessary for the skill's primary function and target well-known open-source software.
[COMMAND_EXECUTION]: The skill provides instructions for executing command-line interface (CLI) tools to perform static analysis on the local codebase. These commands are standard for developer workflows and are used to generate artifacts for dependency triaging.
[INDIRECT_PROMPT_INJECTION]: The skill ingests data from external SCA scanner outputs (e.g., OSV JSON). While this introduces a surface for indirect prompt injection if an attacker-controlled project is scanned, the risk is mitigated as the skill uses a simple Python script for data transformation rather than passing the content directly to an LLM for instruction-following.

reachability-analyzer