The Agent Skills Directory

[SAFE]: The skill primarily consists of high-quality system instructions for AI agents. These instructions guide the agent to behave safely on Windows (e.g., avoiding shell piping for non-ASCII text) and efficiently (e.g., filtering unnecessary directories like node_modules).
[COMMAND_EXECUTION]: The skill includes two Node.js scripts (examples/safe-replace.mjs and scripts/validate-skill.mjs). Analysis shows these scripts are benign utilities for text replacement and skill integrity validation. They use standard file system APIs and do not perform any dangerous command execution or remote connections.
[DATA_EXFILTRATION]: No evidence of data exfiltration was found. The skill explicitly instructs agents to limit context reading to relevant source files and avoid sensitive directories like .git or local caches.
[PROMPT_INJECTION]: The instructions are aimed at improving agent performance and safety. There are no patterns suggesting attempts to bypass model safety filters or override system constraints for malicious purposes.
[EXTERNAL_DOWNLOADS]: The skill does not contain any automatic downloads or remote script execution. References to external tools (like checking for NPM packages) are instructional and require explicit user approval.

winlean-coding