The Agent Skills Directory

[COMMAND_EXECUTION]: The mcp_server.py component implements tools like soc_lint and soc_comp which invoke make within a directory provided via the module_dir argument. This behavior allows for arbitrary command execution if the target directory contains a compromised or malicious Makefile.\n- [COMMAND_EXECUTION]: The skill extensively utilizes subprocess.run in mcp_server.py to execute Python scripts and build utilities. While it avoids using shell=True directly in Python, the resulting shell environments created by make and other build tools are susceptible to command execution risks if project-controlled files (like those in common.mk) are manipulated.\n- [EXTERNAL_DOWNLOADS]: The setup.sh script downloads and installs several standard Python libraries from PyPI, including pandas, numpy, openpyxl, xlrd, pyyaml, and mcp. These are standard dependencies required for the skill's data processing and integration functionality.\n- [EXTERNAL_DOWNLOADS]: The setup.sh script automates the registration of the MCP server by modifying the user's local configuration file at ~/.kimi/mcp.json to include the path to mcp_server.py.

soc-build