The Agent Skills Directory

[DYNAMIC_CONTEXT_INJECTION]: The SKILL.md file uses the !\command`syntax to execute shell commands during the skill loading process. Specifically, the lineTarget path: !`echo "$1"`directly evaluates the first user argument within a shell context. This creates a high risk of command injection if a user provides a path containing shell metacharacters (e.g.,; rm -rf /`).
[DYNAMIC_CONTEXT_INJECTION]: Multiple discovery commands are executed automatically at load time, including find operations across the filesystem to identify project types, source directories, and test frameworks. While these specific commands are discovery-oriented, the use of automated execution of shell commands based on current directory state without user confirmation is a significant attack surface.

dry-consolidation