The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/autocorrect.ts uses execSync to invoke npx autocorrect-node. The filePath variable is interpolated directly into the command string within double quotes. If a malicious filename containing shell metacharacters (e.g., $(...) or `...`) is provided, it could lead to arbitrary command execution in shell environments.
[EXTERNAL_DOWNLOADS]: The skill uses npx to execute bun and autocorrect-node. These commands can download packages from the NPM registry at runtime if they are not already cached, introducing a dependency on external third-party code that is not pinned to specific hashes.
[PROMPT_INJECTION]: The skill processes user-provided markdown and plain text files to generate summaries and titles. This creates an attack surface for indirect prompt injection, where malicious instructions embedded in the input text could influence the agent's behavior.
Ingestion points: The skill reads source files in Step 1 for analysis.
Boundary markers: Absent. The skill does not define delimiters or provide instructions to the agent to disregard commands found within the file content.
Capability inventory: The skill can perform file writes via fs.writeFileSync and execute shell commands via execSync.
Sanitization: Absent. There is no evidence of content filtering or filename sanitization before passing data to tools or shell environments.

baoyu-format-markdown