The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/check_updates.py uses subprocess.run() to execute git commands (git ls-remote, git rev-parse, git config) to identify version status. Additionally, the SKILL.md instructions guide the agent to perform administrative tasks like git clone, rm -rf, and cp -r to update local skill directories.
[INDIRECT_PROMPT_INJECTION]: The skill processes data from local .huashu-skill-meta.json files and git command outputs, which serves as an ingestion surface for untrusted content if those local files are modified by other processes.
Ingestion points: scripts/check_updates.py reads metadata files and git outputs from the skills directory.
Boundary markers: No specific delimiters are used for the command output, though metadata is parsed as structured JSON.
Capability inventory: The skill possesses the ability to execute git commands and perform file system modifications (cloning, deleting, and copying directories).
Sanitization: The Python script passes arguments to subprocess.run as a list rather than a single string, which helps prevent command injection during the version check process.

huashu-skill-updater