The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/battery.sh executes the string values of the --gen-types and --reset-cmd arguments directly in a shell context. This allows for arbitrary command execution if an attacker can influence the parameters passed to the script.
[PROMPT_INJECTION]: The skill ingests and executes SQL from migration and test files, creating a surface for indirect prompt injection. 1. Ingestion points: Database migration files ($MIGRATION) and pgTAP test files ($TESTS) processed in battery.sh. 2. Boundary markers: No boundary markers or instructions to ignore embedded commands are present. 3. Capability inventory: Database access via psql and shell command execution via the GEN_TYPES hook. 4. Sanitization: External file content is passed directly to execution tools without validation or filtering.
[COMMAND_EXECUTION]: The script performs directory operations (mkdir and rmdir) on a file path provided via the --lock argument, which could be leveraged to create or remove directories in unintended locations if the path is not properly validated.

db-pr-battery