The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The installation guide for macOS instructs the agent to use sudo ln -sf to create symbolic links in /usr/local/bin, which requires administrative permissions to modify system-level binary paths.
[REMOTE_CODE_EXECUTION]: On Windows, the skill fetches an executable installer from the vendor's GitHub repository and executes it with the --silent argument using Start-Process, which performs a background installation of arbitrary binary code.
[EXTERNAL_DOWNLOADS]: The skill performs several external requests, including downloading an installer from github.com/diffusionstudio/editor, fetching a Homebrew cask from a vendor tap, and cloning a repository via git clone.
[COMMAND_EXECUTION]: The skill utilizes shell and PowerShell commands to verify file existence (Test-Path, ls), modify the system PATH environment variable, and install dependencies through npm install.
[INDIRECT_PROMPT_INJECTION]: The instructions explicitly direct the agent to read and trust guidance from local documentation files inside the application bundle (Diffusion Studio.app/Contents/Resources/docs), which could allow external content to override agent behavior if those files are modified by other processes.

watch