using-agent-skills

This snippet implements an extensibility mechanism that performs arbitrary shell code execution at SessionStart by running a local session-start.sh file whose location is derived from environment variables and selected based on filesystem existence. While the fragment itself contains no explicit malicious payloads, the absence of provenance/integrity validation and the fallback to a hidden project-local directory create a meaningful supply-chain/persistence risk if those directories or files can be modified by an attacker. The referenced session-start.sh scripts should be reviewed and their provenance/permissions verified.