The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The scripts/install.sh script facilitates arbitrary code execution by downloading a shell script from https://plannotator.ai/install.sh and piping it directly into bash. It also includes a PowerShell installation pattern (irm https://plannotator.ai/install.ps1 | iex) that performs an equivalent operation on Windows. These methods bypass local verification of the content before execution.
[DYNAMIC_CONTEXT_INJECTION]: The scripts/setup-opencode-plugin.sh script registers a slash command (/plannotator-annotate) using the !commandsyntax defined as !plannotator annotate "$ARGUMENTS" ``. This pattern allows for shell command injection if malicious characters are provided via the $ARGUMENTS variable by a user or agent.
[INDIRECT_PROMPT_INJECTION]: Several setup scripts (e.g., setup-codex-hook.sh, setup-gemini-hook.sh) modify the persistent configuration files of AI agents to insert instructions that influence agent behavior across all sessions. • Ingestion points: The developer_instructions field in ~/.codex/config.toml and the content of ~/.gemini/GEMINI.md. • Boundary markers: None; instructions are appended to global configuration files without delimiters or safety warnings. • Capability inventory: The injected instructions command the agent to execute tools using the plannotator CLI. • Sanitization: There is no evidence of input validation or escaping for the data processed by these configuration hooks.
[COMMAND_EXECUTION]: The skill contains multiple scripts that perform broad modifications to user-level configuration files such as ~/.claude/settings.json and ~/.gemini/settings.json. These operations include direct JSON merging and text appending to alter the global settings of various AI agent platforms.
[EXTERNAL_DOWNLOADS]: The installation process for this skill relies on fetching components from the external domain plannotator.ai, which is not on the trusted vendors list. These downloads are performed over unauthenticated channels without integrity verification.

plannotator