The Agent Skills Directory

[COMMAND_EXECUTION]: The bash scripts scripts/generate_playground.sh and scripts/generate_problem.sh use unsanitized input to construct file paths for writing operations. This allows for path traversal attacks where providing a string like ../../.bashrc could result in overwriting sensitive system or configuration files if an agent executes these scripts on behalf of a user.
[DYNAMIC_EXECUTION]: The script scripts/generate_playground.sh employs the eval command to process user-selected options from a menu. Although the current options are defined as static strings, the use of eval on variables that can be influenced by input is an unsafe coding practice that could lead to code execution if the script is modified or extended.
[EXTERNAL_DOWNLOADS]: The generated playgrounds and skill documentation reference JavaScript and CSS assets from cdnjs.cloudflare.com. These assets are hosted by Cloudflare, a well-known and trusted service provider, and are used to provide the CodeMirror editor functionality for the educational playgrounds.

leetcode-teacher