The Agent Skills Directory

[COMMAND_EXECUTION]: The scripts/scaffold.sh script uses sed to inject a user-provided description into a template file. It uses | as a delimiter (sed -e "s|{{description}}|$DESC|g"). A user-supplied description containing the | character could break the sed command or allow for manipulation of the generated SKILL.md file via sed injection.
[PROMPT_INJECTION]: The skill automates the creation of SKILL.md files where the description metadata field is populated directly from user input without sanitization. This creates a surface for indirect prompt injection if the resulting skill files are later processed by an AI agent that treats the metadata as instructions.
[COMMAND_EXECUTION]: The script executes a local audit tool (python3 scripts/audit_skills.py). While this is intended behavior for a developer tool, it relies on the integrity of the project's internal scripts and the execution environment.

new-skill