The Agent Skills Directory

[COMMAND_EXECUTION]: The bridge script scripts/claude_bridge.py executes the claude CLI tool using subprocess.Popen. It implements security best practices by setting shell=False and passing arguments as a structured list, effectively preventing shell-based command injection vulnerability patterns.
[DATA_EXFILTRATION]: The skill transmits workspace context and user prompts to Anthropic's Claude API. This is the primary function of the skill, and the documentation includes explicit warnings to prevent the accidental inclusion of sensitive data such as private keys, secrets, or production logs.
[PROMPT_INJECTION]: The skill possesses an inherent attack surface for indirect prompt injection as it ingests and processes untrusted data to be sent to an external sub-agent.
Ingestion points: The PROMPT argument in scripts/claude_bridge.py is the primary entry point for user or agent-generated instructions.
Boundary markers: The documentation provides clear guidelines for restricting sub-agent behavior (e.g., requesting 'Unified Diff Patch ONLY'), though no programmatic sanitization or delimiters are enforced at the bridge script level.
Capability inventory: The bridge allows the sub-agent to access workspace files and utilize configured tools or MCP servers via CLI arguments like --cd and --allowed-tools.
Sanitization: The script does not perform escaping or validation on the content of the prompt before passing it to the CLI tool.

collaborating-with-claude