The Agent Skills Directory

[SAFE]: The skill follows security best practices for local filesystem management. It includes explicit warnings against storing sensitive data and defines a clear, restricted scope for its operations.\n- [COMMAND_EXECUTION]: The script scripts/skillz.sh executes system commands like mkdir, grep, and find. It protects against injection by validating all user-supplied path segments (type and slug) against a strict regex (^[A-Za-z0-9._-]+$) and by using proper shell quoting and flag terminators (--).\n- [DATA_EXFILTRATION]: While the skill involves moving data to and from the disk, the logic is strictly local. The validation routine skillz_validate_segment prevents path traversal by rejecting separators (/, \\) and parent directory references (..), ensuring that file operations are confined to the intended .skillz directory tree.

file-handler