The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses various shell and PowerShell commands (uname, lsof, netstat, curl) to manage environment detection and port monitoring.
[DATA_EXFILTRATION]: The skill starts an HTTP server (using Python's http.server or Node's serve) bound to port 8289. Although the description states it serves the ./opendesign/ folder, the implementation actually serves the entire project root directory. These tools typically bind to all network interfaces (0.0.0.0) by default, meaning any sensitive files in the project root (such as .env files, credentials, or private keys) could be accessed by any device on the same local network.
[EXTERNAL_DOWNLOADS]: The skill uses npx --yes serve to fetch and execute the 'serve' package from the npm registry as a fallback runtime. This is a download of external code from a public registry.

run-opendesign