The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill provides instructions to download a PHP archive (strauss.phar) from an external GitHub repository (github.com/BrianHenryIE/strauss/releases).
[REMOTE_CODE_EXECUTION]: The skill configures composer.json scripts to automatically execute the downloaded .phar file using the PHP interpreter (@php bin/strauss.phar). This executes code that was not part of the original package and was fetched over the network.
[COMMAND_EXECUTION]: The skill utilizes shell commands (sh -c) and network tools (curl) within Composer lifecycle hooks (post-install-cmd, post-update-cmd) to manage external binaries.
[INDIRECT_PROMPT_INJECTION]: The skill establishes a pattern of ingesting and executing external binaries based on local configuration files, which could be exploited if an attacker gains the ability to modify the project's composer.json or intercept the network request.
Ingestion points: The composer.json script definitions and the extra.strauss configuration block.
Boundary markers: Absent. The skill does not provide mechanisms to verify the integrity (e.g., checksums) of the downloaded .phar before execution.
Capability inventory: The skill uses curl for network access, sh for shell execution, and @php for binary execution. It also performs file system writes to the vendor-prefixed/ directory.
Sanitization: Absent. The scripts directly execute the file downloaded via curl without validation.

wp-strauss-namespace-prefixing