Missing Imports

Code uses a symbol that isn't imported, or imports a symbol that doesn't exist in the source module.

Security Scan

The skill's instructions and requirements are consistent with its stated purpose (detecting/fixing missing imports); it requests no credentials, installs, or unrelated access.

Purpose & Capability

Name and description match the SKILL.md content: guidance is about locating missing imports/exports and running static checkers. No unrelated binaries, env vars, or installs are requested.

Instruction Scope

Instructions direct the agent to inspect source files, check package/module export descriptors (package.json, __init__.py), and run static analyzers (tsc/mypy/pyright). Those actions are expected and proportionate for diagnosing missing-imports. The instructions do not ask for transmitting data externally or accessing unrelated system paths.

Install Mechanism

There is no install spec and no code files. This is instruction-only, which minimizes on-disk risk and is appropriate for the stated purpose.

Credentials

The skill declares no required environment variables, credentials, or config paths. The runtime guidance to read project files is consistent with fixing imports and doesn't require additional secrets or unrelated credentials.

Persistence & Privilege

always is false and the skill does not request persistent system-wide privileges or to modify other skills. Autonomous invocation is allowed by default but is not combined with elevated privileges here.

Assessment

This skill is an instruction-only helper for fixing missing imports and appears coherent. Before enabling it, confirm you’re comfortable letting the agent read your project files and run static analyzers (these actions are necessary for the task). If your repository contains sensitive files you do not want the agent to access, restrict its workspace or withhold this skill. No credentials or installers are required.

The generated code uses a name that hasn't been brought into scope, or imports from a module that doesn't export the named symbol. A guaranteed runtime NameError / ReferenceError / ImportError.

Symptoms

• Code uses Foo but Foo is never imported.
• from mod import X where mod exists but does not export X.
• import { x } from "pkg" with no matching named export.
• Static analysis flags unused-import alongside undefined-name — common when the agent copy-pastes between files.

What to do

• For every symbol used in the diff, confirm there is a corresponding import in the same file or that the symbol is defined locally.
• For every new import, verify the target module actually exports that name. Open the module if needed.
• Don't guess at package layout. When unsure, read the package's package.json exports, __init__.py, or equivalent.
• Run the static checker (tsc, mypy, pyright, etc.) after every non-trivial change. Missing imports almost always surface there.
• Remove unused imports in the same change so the surface stays honest — stale imports mask real failures.