The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses bun to execute its administrative scripts (scripts/audit.mjs, scripts/adopt.mjs, etc.). These scripts are local to the skill's distribution and perform operations like file hashing, directory comparison, and controlled file copying. The scripts include security-focused logic to ensure they stay within intended boundaries.
[SAFE]: The skill implements several security best practices for filesystem management:
[assertBoundedTarget]: Prevents operations on the filesystem root and ensures targets are explicit and distinct from sources.
[assertNoSymlinkAncestors] and [assertNoSymlinkBelow]: Strictly refuses to operate on or through symbolic links, mitigating path traversal and symlink-based privilege escalation or data leakage.
[copyTreeOverlay] path escapes: Explicitly checks for and refuses relative path escapes (e.g., ..) during file operations.
[Repair Backups]: Automatically creates timestamped backups in a hidden .hra-skillpack-backups directory before performing any 'repair' (overwrite) operations.

skillpack-admin