The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands where the project directory is derived from the $ARGUMENTS variable (e.g., GRAPH_DIR=<project-dir> npx vite --open). Without proper sanitization of the user-provided path, an attacker could provide a path containing shell metacharacters to execute arbitrary commands on the host system.- [EXTERNAL_DOWNLOADS]: The instructions direct the agent to run pnpm install and npx vite. These commands download and execute code from the npm registry. While typical for development tools, this introduces a dependency on external registries and the integrity of the dashboard's package manifest, which is not provided in the skill source.

understand-dashboard