Security audit
Security checks across malware telemetry and agentic risk
This skill package is a disclosed development-workflow collection, but it gives itself very broad influence and can prompt automatic setup commands that execute project code without enough user control.
Review carefully before installing. This package is not showing exfiltration or hidden malware, but it can broadly shape agent behavior and may lead the agent to run dependency installs, builds, tests, git commits, merges, pushes, and PR commands. Use it only in repositories you trust, and require explicit confirmation before package-manager commands or git operations that mutate branches or history.
```
### Layer 4: Debug Instrumentation
**Purpose:** Capture context for forensics
```typescript
async function gitInit(directory: string) {59/59 vendors flagged this skill as clean.
No suspicious patterns detected.