The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/apply_local_replacements.py uses user-provided file paths from a JSON configuration file without sufficient sanitization. The file field in the configuration is joined directly to the input_root and output_dir using the / operator (pathlib), which allows for path traversal (e.g., using ../../) to read or overwrite image files outside the intended scope.
[REMOTE_CODE_EXECUTION]: No remote code execution patterns or suspicious downloads were detected. The skill uses the well-known Pillow library for image processing.
[DATA_EXFILTRATION]: No network operations or data exfiltration patterns were found. The skill operates exclusively on local files.
[PROMPT_INJECTION]: The instructions in SKILL.md are descriptive and do not contain attempts to override agent safety guidelines or bypass system prompts.

image-local-replacer