ai-code-blindspots

82 / 100 · Low risk

Fine to try. Some of what it can do is expected: a coding skill usually runs build and test commands.

By event4u-app/agent-config (GitHub) · coding · 19 stars · scanned at commit 3445cf4

Before finishing any code (endpoint, query, migration, render, file, infra, dependency, test) — the senior pre-ship checklist of invisible cross-cutting controls AI omits, with backstop greps

Works with any agent that supports SKILL.md skills.

What this skill can do

Runs commands on your computer

This is disclosed by the author in the skill's SKILL.md or README. It runs automatically when the plugin is installed. Expected for a coding skill.

Found in 13 places.

src/skills/ai-code-blindspots/SKILL.md, line 93agent-config code-graph scan --pack security # one file:line:rule-id per hit
gemini-extension.json, line 7"command": "npx",
hooks/hooks.json, line 8"command": "R=\"${EVENT4U_CONFIG_HOME:-$HOME/.event4u/agent-config}/runtime\"; S=\"$R/current\"; N=\"\"; [ -f \"$S/node\" ] && read -r N < \"$S/node\"; if [ -n

Show 10 more

hooks/hooks.json, line 18"command": "R=\"${EVENT4U_CONFIG_HOME:-$HOME/.event4u/agent-config}/runtime\"; S=\"$R/current\"; N=\"\"; [ -f \"$S/node\" ] && read -r N < \"$S/node\"; if [ -n
hooks/hooks.json, line 28"command": "R=\"${EVENT4U_CONFIG_HOME:-$HOME/.event4u/agent-config}/runtime\"; S=\"$R/current\"; N=\"\"; [ -f \"$S/node\" ] && read -r N < \"$S/node\"; if [ -n
hooks/hooks.json, line 38"command": "R=\"${EVENT4U_CONFIG_HOME:-$HOME/.event4u/agent-config}/runtime\"; S=\"$R/current\"; N=\"\"; [ -f \"$S/node\" ] && read -r N < \"$S/node\"; if [ -n
hooks/hooks.json, line 48"command": "R=\"${EVENT4U_CONFIG_HOME:-$HOME/.event4u/agent-config}/runtime\"; S=\"$R/current\"; N=\"\"; [ -f \"$S/node\" ] && read -r N < \"$S/node\"; if [ -n
hooks/hooks.json, line 58"command": "R=\"${EVENT4U_CONFIG_HOME:-$HOME/.event4u/agent-config}/runtime\"; S=\"$R/current\"; N=\"\"; [ -f \"$S/node\" ] && read -r N < \"$S/node\"; if [ -n
hooks/hooks.json, line 68"command": "R=\"${EVENT4U_CONFIG_HOME:-$HOME/.event4u/agent-config}/runtime\"; S=\"$R/current\"; N=\"\"; [ -f \"$S/node\" ] && read -r N < \"$S/node\"; if [ -n
hooks/hooks.json, line 78"command": "R=\"${EVENT4U_CONFIG_HOME:-$HOME/.event4u/agent-config}/runtime\"; S=\"$R/current\"; N=\"\"; [ -f \"$S/node\" ] && read -r N < \"$S/node\"; if [ -n
hooks/hooks.json, line 88"command": "R=\"${EVENT4U_CONFIG_HOME:-$HOME/.event4u/agent-config}/runtime\"; S=\"$R/current\"; N=\"\"; [ -f \"$S/node\" ] && read -r N < \"$S/node\"; if [ -n
hooks/hooks.json, line 98"command": "R=\"${EVENT4U_CONFIG_HOME:-$HOME/.event4u/agent-config}/runtime\"; S=\"$R/current\"; N=\"\"; [ -f \"$S/node\" ] && read -r N < \"$S/node\"; if [ -n
hooks/hooks.json, line 108"command": "R=\"${EVENT4U_CONFIG_HOME:-$HOME/.event4u/agent-config}/runtime\"; S=\"$R/current\"; N=\"\"; [ -f \"$S/node\" ] && read -r N < \"$S/node\"; if [ -n

Downloads and installs other software

The author does not mention this. It runs automatically when the plugin is installed.

Found in 14 places.

src/skills/ai-code-blindspots/SKILL.md, line 98Rules: `string-built-sql`, `hardcoded-secret` (also md5/sha1), `fast-password-hash` (any SHA-2 over a password counts — a hand-rolled salt is the same defect; a
gemini-extension.json, line 4"description": "Read-only MCP server for the event4u agent-config suite of governed skills, rules and commands. Install the full suite with `npx -y @event4u/age
gemini-extension.json, line 7"command": "npx",

Show 11 more

hooks/hooks.json, line 8"command": "R=\"${EVENT4U_CONFIG_HOME:-$HOME/.event4u/agent-config}/runtime\"; S=\"$R/current\"; N=\"\"; [ -f \"$S/node\" ] && read -r N < \"$S/node\"; if [ -n
hooks/hooks.json, line 18"command": "R=\"${EVENT4U_CONFIG_HOME:-$HOME/.event4u/agent-config}/runtime\"; S=\"$R/current\"; N=\"\"; [ -f \"$S/node\" ] && read -r N < \"$S/node\"; if [ -n
hooks/hooks.json, line 28"command": "R=\"${EVENT4U_CONFIG_HOME:-$HOME/.event4u/agent-config}/runtime\"; S=\"$R/current\"; N=\"\"; [ -f \"$S/node\" ] && read -r N < \"$S/node\"; if [ -n
hooks/hooks.json, line 38"command": "R=\"${EVENT4U_CONFIG_HOME:-$HOME/.event4u/agent-config}/runtime\"; S=\"$R/current\"; N=\"\"; [ -f \"$S/node\" ] && read -r N < \"$S/node\"; if [ -n
hooks/hooks.json, line 48"command": "R=\"${EVENT4U_CONFIG_HOME:-$HOME/.event4u/agent-config}/runtime\"; S=\"$R/current\"; N=\"\"; [ -f \"$S/node\" ] && read -r N < \"$S/node\"; if [ -n
hooks/hooks.json, line 58"command": "R=\"${EVENT4U_CONFIG_HOME:-$HOME/.event4u/agent-config}/runtime\"; S=\"$R/current\"; N=\"\"; [ -f \"$S/node\" ] && read -r N < \"$S/node\"; if [ -n
hooks/hooks.json, line 68"command": "R=\"${EVENT4U_CONFIG_HOME:-$HOME/.event4u/agent-config}/runtime\"; S=\"$R/current\"; N=\"\"; [ -f \"$S/node\" ] && read -r N < \"$S/node\"; if [ -n
hooks/hooks.json, line 78"command": "R=\"${EVENT4U_CONFIG_HOME:-$HOME/.event4u/agent-config}/runtime\"; S=\"$R/current\"; N=\"\"; [ -f \"$S/node\" ] && read -r N < \"$S/node\"; if [ -n
hooks/hooks.json, line 88"command": "R=\"${EVENT4U_CONFIG_HOME:-$HOME/.event4u/agent-config}/runtime\"; S=\"$R/current\"; N=\"\"; [ -f \"$S/node\" ] && read -r N < \"$S/node\"; if [ -n
hooks/hooks.json, line 98"command": "R=\"${EVENT4U_CONFIG_HOME:-$HOME/.event4u/agent-config}/runtime\"; S=\"$R/current\"; N=\"\"; [ -f \"$S/node\" ] && read -r N < \"$S/node\"; if [ -n
hooks/hooks.json, line 108"command": "R=\"${EVENT4U_CONFIG_HOME:-$HOME/.event4u/agent-config}/runtime\"; S=\"$R/current\"; N=\"\"; [ -f \"$S/node\" ] && read -r N < \"$S/node\"; if [ -n

Other copies in this repository

event4u-app/agent-config has 1 more folder with a skill named ai-code-blindspots. This page shows the lowest-scoring copy.

dist/agent-src/skills/ai-code-blindspots 82/100 · Low risk

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'ai-code-blindspots' ] || [ -L ~/.agents/skills/'ai-code-blindspots' ]; then echo 'A skill folder named ai-code-blindspots already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/event4u-app/agent-config' "$d" && git -C "$d" checkout --quiet '3445cf41d6db4b369392dc6fbf7e78a2774e17b5' -- 'src/skills/ai-code-blindspots' && mkdir -p ~/.agents/skills && cp -R "$d"/'src/skills/ai-code-blindspots' ~/.agents/skills/'ai-code-blindspots' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'ai-code-blindspots' ~/.claude/skills/'ai-code-blindspots' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for event4u-app/agent-config shows the score of its lowest-scoring skill.

SkillTrust badge for event4u-app/agent-config

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/event4u-app/agent-config.svg)](https://zalavijaysinh.github.io/skilltrust/repos/event4u-app/agent-config/)

Score history

Date	Version	Score
2026-11-09	`3445cf4`	82
2026-11-07	`90e9a75`	82