The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill describes how to install the fd tool using official and well-known package managers, including Arch Linux's pacman, Ubuntu's apt, macOS's brew, and the Rust cargo registry. These are trusted software distribution channels.
[PRIVILEGE_ESCALATION]: The instructions mention the sudo command for system package installation (pacman and apt). This is standard procedure for user-initiated software installation on Linux-based systems and does not represent an attempt by the skill to silently escalate privileges.
[COMMAND_EXECUTION]: The skill demonstrates the use of the Bash tool to run fd commands, including the -x flag for executing operations (such as rm, wc, or chmod) on search results. These examples illustrate legitimate and intended functionality of the tool for file management tasks.
[INDIRECT_PROMPT_INJECTION]: The skill allows an agent to ingest untrusted filesystem data (filenames and paths), creating a potential attack surface for indirect prompt injection.
Ingestion points: Output from the fd tool, specifically filenames and directory paths (SKILL.md).
Boundary markers: None present.
Capability inventory: Bash (command execution), Read (file inspection), and Task (task management) (SKILL.md).
Sanitization: None specified.
This vulnerability surface is inherent to the primary purpose of a file navigation skill and is documented here for completeness within the context of the skill's intended operation.

file-nav