The Agent Skills Directory

[DATA_EXPOSURE_AND_EXFILTRATION]: The skill reads and writes configuration data to ~/.config/pstack/config.json. This is standard behavior for a setup utility. It follows security best practices by explicitly instructing the agent to keep credentials in the providers' existing stores rather than in the configuration file.
[INDIRECT_PROMPT_INJECTION]: The skill processes data from local configuration files and potential repository overrides. While this is a data ingestion point, it is necessary for the skill's primary function of managing settings, and there is no evidence of unsafe interpolation or high-risk capability abuse.
[EXTERNAL_DOWNLOADS]: The documentation references an upstream source at github.com/cursor/plugins. References to well-known services like GitHub for source credit and documentation are considered safe.

pstack-setup