The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes AskUserQuestion to obtain a product or offer name from the user and interpolates this input directly into a shell command: /bin/rmbc-workspace active "<user's answer>". This pattern is susceptible to command injection if the user input contains shell metacharacters (e.g., semicolons, backticks, or pipes).\n- [DATA_EXFILTRATION]: The skill invokes a local binary (rmbc-analytics) to log usage information such as the skill name, product, and tier. This represents a telemetry mechanism for tracking user activity.\n- [EXTERNAL_DOWNLOADS]: The skill includes an instruction to open a YouTube URL (https://www.youtube.com/watch?v=zI8tNfefH1M) in the system's web browser as part of a welcome flow. YouTube is recognized as a well-known service.\n- [COMMAND_EXECUTION]: The preamble logic executes several local binaries relative to the skill's installation directory, including rmbc-update-check and rmbc-analytics, to manage updates and configuration state.

write-copy