The Agent Skills Directory

[SAFE]: The skill is a set of instructions and data files for code review. It explicitly promotes security best practices, such as instructing developers to never commit API keys or secrets and to use .env files for configuration.
[COMMAND_EXECUTION]: The skill mentions common developer commands such as git diff for analyzing changes and curl for testing local endpoints (http://localhost:3000). These are documented as manual testing steps for a developer and do not involve unauthorized or hidden execution.
[EXTERNAL_DOWNLOADS]: The data files contain links to images hosted on GitHub and Imgur (i.imgur.com). These are used exclusively for documenting UI changes and providing historical context for design reviews. The sources are well-known services and the usage is consistent with the skill's purpose.
[PROMPT_INJECTION]: While the skill contains an example of an AI prompt used in a historical comment ("AI can design well if we make it..."), this is provided as static data for context and does not attempt to override the agent's current safety guidelines or instructions.

charles-review-checklist