skill-manager

The code is a legitimate destructive file-management utility, but it has a path validation flaw: skill_name can escape skills_root through relative traversal or an absolute path. This can cause unintended recursive copying and deletion. Restrict skill_name to a safe directory name and resolve both paths, verifying that skill_dir is contained within the resolved skills root before any filesystem operation.