The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructs the agent to use the Bash tool to execute Python scripts (voice-analyzer.py, voice-stylometry.py, and voice-validator.py). The commands are constructed using a user-supplied {name} variable (e.g., python3 ~/.claude/scripts/voice-analyzer.py analyze --samples skills/voice-{name}/references/samples/*.md), which poses a risk of command injection if the input is not strictly validated.
[REMOTE_CODE_EXECUTION]: The skill relies on several external Python scripts located in ~/.claude/scripts/ and scripts/. These files are not provided as part of the skill distribution, making it impossible to audit their contents and ensuring they perform only the described actions.
[INDIRECT_PROMPT_INJECTION]: The skill includes a 'Voice Creation' mode that gathers 50+ writing samples from untrusted external sources like Reddit, Hacker News, and various forums. These samples are processed directly by the agent and analysis scripts, providing a significant surface for indirect prompt injection attacks.
Ingestion points: SKILL.md Phase 1 (COLLECT) gathers raw text samples from the web.
Capability inventory: The skill has broad capabilities including Bash, Write, Read, Edit, Task, Skill, and Agent tools.
Sanitization: There are no explicit instructions for sanitizing or filtering the content of these external samples before they are ingested into the pipeline.
Boundary markers: The instructions do not define boundary markers to prevent the agent from following instructions potentially embedded within the writing samples.
[METADATA_POISONING]: The references/narrative-patterns.md file references a fictional or hallucinated research paper ('Russell et al. (2026)', arXiv:2604.03136v4) to provide false authority to its validation rubric. This is deceptive metadata that could lead a user or agent to over-trust the validation results.

writing