The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/install_local_skill.py performs destructive file system operations based on user or agent-provided arguments.
It utilizes shutil.rmtree() to recursively delete existing directories that reside at the intended symlink location.
It uses Path.unlink() to remove existing files or symlinks.
[DATA_EXFILTRATION]: The skill can be used to expose sensitive local data to the agent's context through symlink creation.
The install_local_skill.py script allows symlinking arbitrary source paths (provided via the skill argument) to the agent's configuration directories (e.g., ~/.claude/skills/).
This mechanism allows an agent to be directed to link sensitive folders like ~/.ssh, ~/.aws, or project .env files into its own workspace, making their contents readable by the agent.

sync-skill