The Agent Skills Directory

[DYNAMIC_EXECUTION]: The skill integrates with the likec4 CLI tool, which supports executing arbitrary logic defined in workspace configuration files (likec4.config.ts, likec4.config.js) via the generators property. Because the agent is instructed to run this tool on untrusted repository content, a malicious project could achieve remote code execution (RCE) by providing a compromised configuration file that the agent then invokes during the validation or build phases.
Evidence: likec4/references/configuration.md details the generators option which executes async functions from the config file.
[REMOTE_CODE_EXECUTION]: The skill relies on executing the likec4 CLI and related packages (@likec4/leanix-bridge, @likec4/mcp) using package runners like npx, bunx, and pnpm dlx. These dependencies are fetched from a third-party registry and are not associated with the provided list of trusted organizations or well-known services.
Evidence: Documented in likec4/SKILL.md and likec4/references/cli.md as standard commands for the agent to use.
[INDIRECT_PROMPT_INJECTION]: The code-to-c4 sub-skill is designed to ingest and process untrusted data from a user's repository, such as source code, build manifests, and deployment files, to reconstruct an architectural model. This creates a vulnerability where malicious content in the repository could manipulate the agent's summaries, evidence tables, or subsequent design recommendations.
Ingestion points: code-to-c4/SKILL.md specifies reading repository instructions, manifests, executable entrypoints, and infrastructure definitions.
Boundary markers: No explicit boundary markers or 'ignore' instructions are used when interpolating this data into the architecture model.
Capability inventory: The skill has the capability to perform repository-wide searches, read arbitrary files, and execute shell commands via the likec4 tool.
Sanitization: There is no evidence of sanitization or filtering applied to the source code content before it is processed by the agent.

system-design