The Agent Skills Directory

[COMMAND_EXECUTION]: The scripts/verify-plugin.sh script is vulnerable to shell command injection. It accepts an organization alias as a command-line argument and interpolates it into a string that is subsequently executed via bash -lc. Because this occurs within a heredoc context that is later interpreted by a shell, a malicious alias containing shell metacharacters or command substitution (e.g., $(id)) can lead to the execution of arbitrary commands on the local system.
[EXTERNAL_DOWNLOADS]: The scripts/bootstrap-plugin.sh script automates the setup of an external CLI plugin by cloning a GitHub repository (Jaganpro/sf-cli-plugin-data360.git) and running yarn install. This process downloads and executes unverified third-party code and dependencies from the internet at runtime, introducing potential supply chain risks.
[REMOTE_CODE_EXECUTION]: The references/plugin-setup.md file recommends an installation method that pipes a remote Python script directly into an interpreter (curl -sSL ... | python3). This is a dangerous pattern that executes remote code without local inspection or integrity verification.

sf-datacloud