The Agent Skills Directory

[COMMAND_EXECUTION]: The scripts/convert.sh script utilizes rsync -a --copy-links to process resource directories. By following symbolic links, the script could be induced to copy sensitive system files or directories into the converter's output folder if a source skill contains malicious symlinks.
[COMMAND_EXECUTION]: The conversion pipeline includes a clean-up step that executes rm -rf on an output directory path. Part of this path is constructed using the name field from the skill's YAML frontmatter. Because this field is not sanitized for path traversal sequences (such as ../), a malformed skill name could potentially cause the script to delete unintended files or directories outside of the designated converter directory.

converter