coding-standards Audit report.

Warnings

• Dependency or permission surface needs review
• Permission surface may require sandboxing
• Financial research output is not financial advice; require human review before any live investment decision
• SKILL.md contains React, Next.js, API design, and Supabase-specific examples that overlap with the stated scope boundaries, which say to use frontend-patterns and backend-patterns for framework-specific guidance.
• The skill claims to be a baseline cross-project standard but includes framework-specific file structures and libraries, which may cause agents to apply them outside the intended context.
• No explicit setup or invocation details are included, though this is largely a knowledge-based skill and does not require installation.
• Financial research output is not financial advice; require human review before any live investment decision.
• Permission surface needs review: secrets or environment access, filesystem or document access
• Dependency/runtime risk: credential or environment access, network or browser surface
• Permission surface: secrets or environment access, filesystem or document access

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.