The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill provides instructions for installing the Tencent SkillHub CLI by downloading a shell script from Tencent Cloud and piping it directly into a bash shell. Piped execution of remote scripts is an insecure pattern that lacks verification of the downloaded content.
[DYNAMIC_EXECUTION]: The synchronization scripts prepare-publish.sh and push-lenovo-batch.sh include embedded Python code that is executed at runtime via python3 to process YAML configurations and manage metadata injection. This dynamic execution of embedded source code is a medium-risk practice.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from local skill directories and user-managed white-lists (allowlist-*.yaml). This metadata, including skill versions and descriptions, is interpolated into shell commands and temporary configuration files in push-lenovo-batch.sh. The lack of rigorous sanitization for these fields provides an attack surface where malicious input could alter the tool's behavior.
Ingestion points: Reads SKILL.md frontmatter from local skill directories and platform-specific allowlist-*.yaml files.
Boundary markers: None present; the tool assumes the integrity of the skill files it processes.
Capability inventory: Full shell execution of platform CLIs (clawhub, skillhub, lenovoskill); script execution of utility tools; file writes to /tmp/ and source directories.
Sanitization: Limited to basic quote escaping in the Python injection logic; missing robust validation for shell variable interpolation in batch scripts.
[COMMAND_EXECUTION]: The script push-lenovo-batch.sh utilizes the expect utility to automate interactive shell prompts during the Lenovo platform publication process. This includes automatically sending confirmation inputs (send "y\r"), which reduces user oversight and manual review of critical publication actions.
[EXTERNAL_DOWNLOADS]: The skill fetches installation materials from Tencent Cloud and uses npx to download and run the @lenovo-open/skill-cli package from the NPM registry. These resources originate from well-known technology organizations.

skill-publish-sync