replication-package
Warn
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: MEDIUMDYNAMIC_CONTEXT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses the
!command`` syntax inSKILL.mdto execute shell commands during the skill loading phase. - Evidence:
!d=${CLAUDE_SKILL_DIR}; command -v skill-toc >/dev/null 2>&1 && exec skill-toc "$d"; s=$HOME/.claude/skills/plugin-utils/bin/skill-toc; [ -x "$s" ] && exec "$s" "$d"; echo "(skill-toc unavailable...)"inSKILL.md. - This pattern triggers shell execution without an explicit user action, which is used here to dynamically generate a table of contents but represents a silent execution vector.
- [COMMAND_EXECUTION]: The skill instructs the agent to perform various shell commands for archival and cleanup tasks.
- Evidence: Instructions recommend using
bsdtarfor 7z creation and provide a custom Python script for file processing. - [DYNAMIC_EXECUTION]: The skill includes a standalone script that is executed at runtime to modify the content of files provided by the user.
- Evidence:
scripts/scrub_metadata.pyuses thepikepdflibrary to programmatically edit PDF structures and uses regex to modify OOXML archives.
Audit Metadata