The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill links to external documentation at https://jeffallan.github.io/claude-skills/skills/devops/cli-developer/. This domain and path have been explicitly flagged by security scanners as malicious (URL:Blacklist).
[DYNAMIC_EXECUTION]: In references/design-patterns.md, the skill advocates for a plugin architecture that dynamically loads code from user-controlled paths and environment variables such as MYCLI_PLUGIN_PATH and ~/.mycli/plugins/. This pattern allows for arbitrary code execution if the environment variables or local filesystem paths are subverted by an attacker.
[COMMAND_EXECUTION]: The reference guide for Node.js (references/node-cli.md) demonstrates the use of execaCommand to execute shell commands. This capability, combined with the ingestion of untrusted user arguments, poses a significant risk of command injection.
[INDIRECT_PROMPT_INJECTION]: The skill facilitates the creation of tools that ingest untrusted data from external sources.
Ingestion points: CLI arguments via commander.parse(), viper.ReadInConfig(), and typer.Argument() in references/go-cli.md and references/python-cli.md.
Boundary markers: None identified in the provided templates.
Capability inventory: Subprocess execution (execaCommand), file system writes (fs.writeJson), and dynamic library loading (require).
Sanitization: No input sanitization or validation logic is implemented in the core execution templates.
[CREDENTIALS_UNSAFE]: The design patterns documentation (references/design-patterns.md) suggests storing sensitive data in ~/.mycli/credentials.json and includes struct definitions for API tokens. While it mentions file permissions, providing a blueprint for local secret storage increases the risk of credential theft.
[PRIVILEGE_ESCALATION]: The error handling logic in both references/go-cli.md and references/python-cli.md explicitly instructs users to "Try running with sudo" when encountering permission errors. Encouraging users to run complex CLI logic with elevated privileges is a dangerous security anti-pattern.

cli-developer