The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses subprocess.run to interact with Git and the pnpm package manager. These executions are performed using argument lists rather than raw shell strings, which is a best practice that prevents shell injection vulnerabilities.
[DATA_EXPOSURE]: The file synchronization logic in scripts/sync_skill_repo.py includes a predefined exclusion list (.env, .git, node_modules, __pycache__). This prevents the accidental synchronization or exfiltration of sensitive local environment variables, Git history, or build artifacts to remote repositories.
[REMOTE_CODE_EXECUTION]: The skill utilizes pnpm dlx skills to add or update skills. While this involves downloading and executing packages from a registry, it is the intended primary function of the skill for maintaining the agent's environment and targets the platform's standard tooling.
[PROMPT_INJECTION]: The SKILL.md instructions are focused on operational workflows for Git management and skill synchronization. No patterns attempting to bypass safety filters or override system-level agent behavior were detected.
[SAFE]: The script implements validation for skill names ([a-z0-9-]+) before using them in commands, ensuring that even if a skill's metadata were compromised, it would not lead to command injection.

sync-skill-repo