The Agent Skills Directory

[DYNAMIC_EXECUTION]: The skill synthesizes and executes code derived from untrusted external data.
Evidence: In Step 3, the agent is instructed to synthesize script.ts and script.test.ts based on the JSON output and intent of a recent /scrape command.
Evidence: In Step 8, the generated code is executed via bun test or $B skill test against a captured HTML fixture.
[INDIRECT_PROMPT_INJECTION]: The skill ingests data from external web pages to generate logic, creating a vulnerability surface.
Ingestion points: The HTML content of web pages returned by previous /scrape calls in the conversation history.
Boundary markers: The instructions lack specific guidance on using delimiters or warnings when the agent processes the scraped data for code synthesis.
Capability inventory: The agent has access to Bash execution, Write operations, and the ability to run generated tests.
Sanitization: There are no explicit instructions to sanitize or escape the scraped content before using it to generate the parseFromHtml function.
[COMMAND_EXECUTION]: The skill relies on the execution of multiple local binaries and shell scripts.
Evidence: The preamble executes various binaries in ~/.claude/skills/gstack/bin/, such as gstack-update-check and gstack-config.
Evidence: The skill uses eval and source on command outputs, specifically eval "$(~/.claude/skills/gstack/bin/gstack-slug)".
[PERSISTENCE]: The skill installs permanent executable artifacts on the local system.
Evidence: Step 10 moves the staged skill directory into ~/.gstack/browser-skills/, making the generated scraper available for future agent invocations.
[DATA_EXFILTRATION]: The skill collects and stores usage and telemetry data.
Evidence: Usage data is appended to ~/.gstack/analytics/skill-usage.jsonl.
Evidence: The skill uses a binary ~/.claude/skills/gstack/bin/gstack-telemetry-log to report events remotely, albeit with user consent.
[EXTERNAL_DOWNLOADS]: The skill synchronizes local state with a remote repository.
Evidence: The Artifacts Sync section uses git fetch origin and git merge within the ~/.gstack/ directory to update local artifacts.

skillify