The Agent Skills Directory

[COMMAND_EXECUTION]: The sync_all_skills.py script executes a helper script using subprocess.run. The implementation uses a list-based argument structure and avoids invoking a shell (shell=True is not used), which is a secure method that prevents shell injection vulnerabilities.
[SAFE]: The core synchronization logic in sync_folders.py utilizes standard Python libraries such as shutil, pathlib, and os. Path resolution is handled correctly using .resolve(), and file operations are limited to the user-specified source and target directories.
[SAFE]: No malicious patterns, such as prompt injection, hardcoded credentials, unauthorized network communication, or persistence mechanisms, were detected in any of the skill files.

folder-sync