The Agent Skills Directory

[COMMAND_EXECUTION]: The skill's primary function is to execute arbitrary shell commands provided via the $ARGUMENTS parameter within a terminal harness session. This creates a potential surface for command injection if input is not carefully handled.
Evidence: SKILL.md instructions specify parsing $ARGUMENTS and launching the command in an isolated tmux session.
Evidence: references/harness-loop.md provides shell templates that substitute <command-under-test> directly into tmux new-session and script commands.
[DYNAMIC_CONTEXT_INJECTION]: The skill utilizes the ! command syntax in SKILL.md to execute shell commands at skill load time to determine the local environment and project scripts.
Evidence: tmux: !command -v tmux >/dev/null 2>&1 && tmux -V || echo "(none)"``
Evidence: Repo-native harness hints: !out=$(jq -r '.scripts | keys[]' package.json 2>/dev/null | grep -iE 'e2e|smoke|demo|tui|cli' | head -5); echo "${out:-(none)}"``
[INDIRECT_PROMPT_INJECTION]: The skill ingests and processes untrusted output from terminal sessions, which could contain malicious instructions designed to influence the agent's behavior during assertion and reporting phases.
Ingestion points: Captured terminal transcripts in references/harness-loop.md (e.g., tmux capture-pane -pt "$S" > "$SCRATCH/00-initial.txt").
Boundary markers: The skill does not define specific delimiters or instructions for the agent to ignore potentially malicious content within the transcripts.
Capability inventory: The skill has extensive capabilities to execute shell commands, manage tmux sessions, and run Python scripts.
Sanitization: There is no evidence of sanitization or filtering applied to terminal outputs before they are processed by the agent.
[DYNAMIC_EXECUTION]: The skill includes a template for a Python driver to facilitate interactive flows without tmux, which executes commands via os.execvp at runtime.
Evidence: references/harness-loop.md provides a Python script using pty.fork() and os.execvp(sys.argv[1], sys.argv[1:]) to wrap the command under test.

verify-cli