The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides instructions and examples for executing local shell scripts (scripts/catalog.sh, hooks/scripts/catalog-sync.sh) to synchronize project metadata with the filesystem. These are standard development maintenance tasks.
[REMOTE_CODE_EXECUTION]: No remote code execution was detected. All scripts referenced are local to the repository's scripts/ or hooks/ directories.
[DATA_EXFILTRATION]: No network activity or sensitive data access patterns were identified. The tool operates strictly on local project files such as README.md, plugin.json, and CLAUDE.md to update counts.
[PROMPT_INJECTION]: The skill contains standard instructional language and does not attempt to bypass safety filters or override system instructions.
[CREDENTIALS_UNSAFE]: No hardcoded secrets, API keys, or access to sensitive credential stores (like ~/.ssh or .env) were found.

skill-catalog