The Agent Skills Directory

[Command Injection Surface]: The skill interpolates user-provided arguments (app-id and env-id) directly into a Bash command string used to invoke a Node.js script.
Evidence: node scripts/open-wrap-url.js --app-id "<app-id>" --env-id "<environment-id>" [--env "Prod|Test"] in SKILL.md.
Context: While the instructions utilize double quotes to encapsulate the identifiers, this pattern represents an entry point for command injection if the user-supplied data contains shell metacharacters (e.g., backticks, semicolons) that are not properly sanitized by the underlying script or the shell environment.
[Local Script Execution]: The skill relies on executing local JavaScript files (check-version.js and open-wrap-url.js) to handle logic and URL construction.
Evidence: Run node "${PLUGIN_ROOT}/scripts/check-version.js" and node scripts/open-wrap-url.js in SKILL.md.
Context: This is a standard design for skills that delegate complex tasks to scripts within the same package. The security of this operation depends on the integrity and safety of the referenced scripts.
[Interaction with Vendor Resources]: The skill constructs URLs targeting make.powerapps.com and make.test.powerapps.com.
Context: These are official domains associated with Microsoft Power Apps, aligning with the skill's stated purpose and the author's identity. This is considered standard and safe behavior for interacting with vendor-owned infrastructure.

open-wrap-url