The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill downloads and executes the Fisher plugin manager installation script directly from a GitHub repository using curl piped to source within the Fish shell.
Evidence: fish -c "curl -sL https://raw.githubusercontent.com/jorgebucaran/fisher/main/functions/fisher.fish | source && fisher install jorgebucaran/fisher" in SKILL.md.
[DYNAMIC_EXECUTION]: The skill performs runtime compilation by writing Swift source code to a temporary file, compiling it with swiftc, and executing the resulting binary to modify system terminal role handlers.
Evidence: Compilation and execution logic found in references/set-default-terminal.md.
[PRIVILEGE_ESCALATION]: The configuration process requests elevated permissions using sudo to modify /etc/shells, which is a system-level configuration file.
Evidence: echo "$(which fish)" | sudo tee -a /etc/shells in SKILL.md.
[EXTERNAL_DOWNLOADS]: Fetches the Homebrew installation script from its official GitHub repository to set up the package manager.
[EXTERNAL_DOWNLOADS]: Clones the LazyVim starter configuration from the LazyVim GitHub organization to initialize the Neovim environment.
[PERSISTENCE]: Modifies shell profile configurations (~/.config/fish/config.fish) and system-wide shell allowed lists to establish and maintain the custom environment across user sessions.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and apply configuration templates from its own reference files (e.g., fish-config.md, yazi-config.md). While these are internal to the skill, the pattern of applying untrusted or external configurations to the local environment represents a significant surface for indirect instruction injection if the skill's references are manipulated.

configuring-ghostty-vibe-stack