The Agent Skills Directory

[SAFE]: The skill is a defensive tool designed to assist agents in performing security audits of code changes according to industry best practices.
[COMMAND_EXECUTION]: The skill guides the agent to use common diagnostic tools like git, grep, pnpm audit, and pip-audit to identify sensitive code and check for vulnerabilities. These actions are appropriate for the skill's purpose as a security reviewer.
[INDIRECT_PROMPT_INJECTION]: The skill identifies a potential attack surface as it is designed to process and analyze untrusted source code provided by users. Ingestion points: Analyzing code diffs and file contents via git and grep commands specified in SKILL.md. Boundary markers: No specific delimiters or instructions to ignore embedded prompts in the analyzed code are defined. Capability inventory: The skill utilizes shell execution and file system access to conduct security audits. Sanitization: No sanitization is performed on the code content being reviewed, which is expected for an analysis tool.

security-review