The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/install-skill-from-github.py executes the git binary to clone and manage repositories. It uses subprocess.run with a list of arguments, which prevents shell injection vulnerabilities by ensuring that user-supplied repo paths or names are not interpreted as shell commands.
[EXTERNAL_DOWNLOADS]: The skill downloads repository archives and clones data from github.com and codeload.github.com. It implements a security check in _safe_extract_zip that validates file paths within ZIP archives to ensure they do not escape the destination directory, effectively mitigating ZipSlip directory traversal attacks.
[REMOTE_CODE_EXECUTION]: The core function of the skill is to fetch and install executable code (additional agent skills) from remote repositories. While the installer itself is designed with security controls, the ability to introduce arbitrary third-party code into the agent's local filesystem is an inherent risk factor.

skill-installer