The Agent Skills Directory

[COMMAND_EXECUTION]: The Bash script template provided in the 'Behavior' section is vulnerable to shell command injection through the <target> and <note> placeholders. Because these values are interpolated inside double quotes within a shell command execution block, any shell metacharacters such as backticks or $(...) sequences provided by a user will be evaluated and executed by the shell before the intended command runs.- [COMMAND_EXECUTION]: Specifically, the assignment SLUG=$(echo "<target>" | ...) and the NOTE_JSON generation printf '%s' "<note>" | ... allow for arbitrary command execution on the host system. A malicious user could provide a payload like $(rm -rf /) as a target, which the agent would then execute as part of the script logic.

kaizen