The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill instructions direct the agent to utilize bunx effect-solutions show <topic> for retrieving patterns. The bunx (or npx) utility downloads and executes a package from the NPM registry. Since the effect-solutions package does not originate from a recognized trusted organization or well-known service, this constitutes an unverified remote code execution vector.\n- [COMMAND_EXECUTION]: The reliance on the bunx shell command introduces a dependency on external binary execution. This expands the attack surface, as the agent's behavior is influenced by the integrity and security of the external package and the execution environment.\n- [EXTERNAL_DOWNLOADS]: The skill's functionality depends on the ability to fetch third-party packages from the NPM registry during execution, which introduces a dependency on external network resources and registry security.\n- [NO_CODE]: The skill is comprised of markdown instructions and reference files without any associated executable scripts (such as .js or .py files) within the skill folder. While the skill itself does not contain malicious code, its instructional logic triggers the execution of external software.

effect-v4-tutor