The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill fetches the remote skill catalog and metadata from the official AdirD/agent-shell-hamelech GitHub repository and raw.githubusercontent.com. These are well-known, trusted sources for this specific skill's purpose.
[COMMAND_EXECUTION]: The scripts/status.py script executes various local commands including npm exec, gh api, and sys.executable. These are used to query the local environment and the GitHub API for skill status information. The usage of subprocess.check_output and subprocess.run is constrained to specific, hardcoded utility commands and does not accept arbitrary user input for shell execution.
[DATA_EXPOSURE]: The skill accesses local configuration files, specifically ~/.agents/.skill-lock.json, and environment variables like GITHUB_TOKEN or GH_TOKEN. This is necessary for its functionality to compare local versions with remote ones and to authenticated GitHub API requests. No exfiltration to unauthorized third parties was detected; network activity is directed to GitHub APIs.

melech