The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes an external script located at ~/.claude-octopus/plugin/scripts/orchestrate.sh. This script is part of the vendor's project infrastructure but is not provided within the skill's source code, meaning its internal logic and network/file operations cannot be verified.
[DYNAMIC_EXECUTION]: In the lessons-capture phase, the skill interpolates user-provided text directly into a shell heredoc: cat >> .octo/LESSONS.md << EOF ... ${USER_WHAT_WENT_WELL} ... EOF. Because the heredoc delimiter EOF is not quoted, the shell will process and execute any command substitutions (such as backticks or $(...)) contained within the user's response, leading to arbitrary command execution.

skill-ship