The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The skill provides a reusable pattern for elevated command execution using sudo -n (non-interactive) on POSIX systems. This could allow for unauthorized administrative actions if the agent executes the pattern without sufficient oversight.\n
Evidence in SKILL.md: full = [sudo, "-n", cmd, *args]\n
Evidence in references/command-execution.md: return run_cmd([sudo, "-n", *map(str, cmd)], timeout)\n- [COMMAND_EXECUTION]: The instructions and reference files provide templates for executing shell commands via the subprocess module, which is a powerful capability that requires careful handling of arguments.\n
Evidence in SKILL.md: subprocess.run(full, capture_output=True, text=True, check=False)\n
Evidence in references/command-execution.md: subprocess.run(cmd, capture_output=True, text=True, timeout=timeout, check=False)\n- [INDIRECT_PROMPT_INJECTION]: The skill implements logic to analyze the local codebase and run validation tools, creating a surface where malicious file content or names could influence agent behavior.\n
Ingestion points: The skill uses grep to research patterns in the existing codebase and runs ruff or mypy on project files as part of its validation process.\n
Boundary markers: Includes an explicit check to "STOP — Verify with user first" before applying stdlib-only restrictions, which provides a point for human review.\n
Capability inventory: The skill can execute system commands via subprocess.run and write to the filesystem during script creation and testing.\n
Sanitization: No specific sanitization or escaping of external content (like filenames or grep results) is defined in the provided patterns before they are used in commands.\n- [DYNAMIC_EXECUTION]: The skill's workflow involves generating Python scripts and then immediately executing them (or tools that parse/execute them) for validation.\n
Evidence: The 'PHASE 2: Creation' and 'PHASE 3: Validation' steps describe writing code and then running python -m py_compile, ruff, and type checkers on it.

python3-stdlib-only