The Agent Skills Directory

[COMMAND_EXECUTION]: The batch generation utility in scripts/generate-batch.py is vulnerable to arbitrary file write via path traversal.
The script reads an output file path directly from a user-supplied JSON configuration file without performing any sanitization or validation.
This path is passed directly to os.makedirs and open(output_path, 'w'), allowing the script to create directories and overwrite files anywhere on the filesystem that the execution process has permissions to access.
An attacker could exploit this to overwrite sensitive configuration files or inject malicious code into startup scripts.
[EXTERNAL_DOWNLOADS]: The SEO auditing tool scripts/pele-seo-auditor.py performs outbound network requests to external domains.
It utilizes the requests library to fetch robots.txt and sitemap.xml from user-defined target URLs.
The script includes a crawler that recursively fetches pages from the target site to perform on-page analysis.
It communicates with the Google PageSpeed Insights API (googleapis.com) to retrieve performance metrics, which involves sending the audited URL to an external service.

seo-copywriter-pro