The Agent Skills Directory

[COMMAND_EXECUTION]: The skill is designed to execute arbitrary shell commands listed in a council.config.yaml file. The Node.js scripts council-job.js and council-job-worker.js parse this configuration and use child_process.spawn to run these commands in parallel. User-provided prompts are passed directly as arguments to these commands.
[REMOTE_CODE_EXECUTION]: The script scripts/council-job.js contains a launchUiInterface function that attempts to execute a local binary named council-worker.exe using cmd.exe. Since this executable is not provided with the skill, its origin and purpose are unverifiable and represent a risk of executing malicious code if placed on the system.
[EXTERNAL_DOWNLOADS]: An error message in scripts/council-job.js instructs users to run npx github:team-attention/agent-council, which triggers the download and execution of code from an external, untrusted GitHub repository.
[PERSISTENCE_MECHANISMS]: The skill includes gup.xml files, which are configuration files for the WinGup updater (used by Notepad++). The presence of these files is irrelevant to the stated purpose of the skill and could indicate an attempt to leverage existing system updaters for persistence or unauthorized binary execution. The file references the official Notepad++ update URL https://notepad-plus-plus.org/update/getDownloadUrl.php.

agent-council