The Agent Skills Directory

[COMMAND_EXECUTION]: The skill exhibits a command injection vulnerability in Step 6. The variable {release_notes} is interpolated directly into a shell command: ./scripts/deploy-electron-update.sh --notes "{release_notes}". Since release notes can be automatically generated from git commit history or provided by a user, an attacker could craft a commit message or input containing shell metacharacters (e.g., ;, `, or $()) to execute unauthorized commands on the host system.
[EXTERNAL_DOWNLOADS]: In Step 5c, the skill uses npx electron-builder. This utility may download and execute code from the NPM registry at runtime if the package is not already present or pinned in the project's dependencies, creating a potential vector for supply chain attacks.
[CREDENTIALS_UNSAFE]: The skill hardcodes a specific VPS IP address (84.46.253.137) and explicitly sets the deployment user to root. Exposing infrastructure IP addresses and encouraging deployment via the root account are poor security practices that increase the risk of targeted attacks and privilege escalation if the deployment script or environment is compromised.

electron