The Agent Skills Directory

[SAFE]: The skill is designed for technical due diligence and architectural assessment. It provides a structured framework for analyzing code quality and strategic fitness without executing dangerous commands or exfiltrating data.
[DATA_EXPOSURE]: The skill accesses project manifests (package.json, requirements.txt, etc.) and environment configurations (.env.example) to assess tech stack and security posture. This data is used solely for generating the report and is not sent to external servers.
[INDIRECT_PROMPT_INJECTION]: As the skill ingests and analyzes external codebase files, it is theoretically susceptible to instructions hidden within those files (e.g., inside a README.md or code comments). However, the skill lacks high-risk capabilities like network exfiltration or arbitrary code execution, which limits the potential impact of such an injection.

cto-review