The Agent Skills Directory

[SAFE]: No malicious patterns, obfuscation, or dangerous command execution were detected. The skill is primarily composed of markdown documentation templates and a benign placeholder script.- [DATA_EXPOSURE]: The skill uses standard placeholders for credentials in its templates (e.g., 'YOUR_API_TOKEN_HERE'), which is a safe practice for documentation examples and does not constitute a hardcoded credential finding.- [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection by processing external codebase files, but lacks the dangerous capabilities (e.g., network exfiltration or shell access) that would make this surface exploitable.

codebase-documenter