The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/fetch_skill.py uses subprocess.run to execute Git operations including clone, sparse-checkout, and checkout. These are called with argument lists, which prevents shell injection.
[EXTERNAL_DOWNLOADS]: The skill downloads directory contents from external GitHub repositories provided by the user.
[PROMPT_INJECTION]: The skill serves as a delivery mechanism for indirect prompt injection, as it allows the agent to download and install external SKILL.md instruction files.
Ingestion points: Files downloaded from external GitHub repositories.
Boundary markers: None identified.
Capability inventory: subprocess.run for system commands, shutil for file system manipulation.
Sanitization: The script verifies the presence of SKILL.md but does not validate or sanitize its content before installation.

add-skill