The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses a local shell script (scripts/set_title.sh) to update the terminal window title using ANSI escape sequences. The script is invoked by the agent or via a platform-native hook.
[INDIRECT_PROMPT_INJECTION]: The skill ingests and processes user prompts to determine the appropriate terminal title.
Ingestion points: hooks/set-title-hook.sh reads the raw JSON payload containing the user prompt from stdin.
Boundary markers: None present.
Capability inventory: Execution of shell commands via bash and potential execution of a local herdr binary for pane management.
Sanitization: Both the hook and the main script implement sanitization using tr -d '\000-\037', which removes all non-printable ASCII control characters. This effectively prevents the injection of malicious terminal escape sequences that could be embedded in a user's prompt.
[COMMAND_EXECUTION]: When the HERDR_ENV environment variable is active, the script attempts to call a local herdr binary to update metadata. The implementation uses the -- delimiter to ensure that titles starting with hyphens are not interpreted as command-line flags, preventing argument injection.

terminal-title