What the reviewer found
A project-scaffolding skill that writes a Dockerfile with per-stack toolchain setup (rustup via sh.rustup.rs, Go via go.dev) into the target project it is seeding. The curl-piped installers are the vendors' own official scripts and `ls .claude/skills/` just checks which skills already exist before writing new ones.
installs-software— installs softwarenetwork— calls the vendor’s API
What was read
The file as it ships in dburkart/auto-engineer:
.claude/skills/seed/SKILL.md
What the static scan said
The scan flagged 4things. The reviewer kept 0 and dismissed 4 as false.
SC2Downloads and executes remote code — false positiveAS1Reads agent configuration directories — false positiveAS3Enumerates other installed skills — false positiveNETMakes network calls — false positive
How this review was made
Sonnet 5 read the files above on 7 September 2026 and answered three questions: is it dangerous to whoever installs it, is each scanner finding real, and what should the installer know. The verdict is bound to the file's hash; when the file changes, it is scanned afresh and reviewed again. A script that changes while the definition does not is not re-reviewed — that is a known gap. How the scan and the review work.