The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The agents/rust-project-init.md file contains instructions to install the beads CLI tool by piping a script directly from https://raw.githubusercontent.com/steveyegge/beads/main/scripts/install.sh into bash. This pattern of executing unverified remote code is a significant security risk.
[COMMAND_EXECUTION]: Several validation and automation scripts, such as skills/project-validation/scripts/validate_project.py and skills/beads-validation/scripts/validate_beads.py, use subprocess.run with shell=True to execute system commands like lsof and kill. While used for legitimate purposes like restarting the application during validation, these represent a broad permission set that could be exploited if inputs were manipulated.
[INDIRECT_PROMPT_INJECTION]: The skill's primary workflow (managed by agents/vibe-coder.md) relies on processing user-provided descriptions to generate code, database schemas, and documentation, creating a surface for indirect injection.
Ingestion points: External data enters the context through docs/PRD.md, docs/DESIGN.md, and natural language feature descriptions supplied by the user.
Boundary markers: The skill uses structured markdown headers and sections as delimiters, though it lacks explicit instructions to ignore embedded commands within user content.
Capability inventory: The skill has extensive capabilities, including file modification across the project (Write, Edit tools), system command execution (Bash tool), and network checks via verify.py.
Sanitization: There is no evidence of explicit sanitization or filtering of external content before it is interpolated into prompts or used in code generation logic.
[PERSISTENCE]: The skill maintains state across sessions by modifying project configuration files such as CLAUDE.md (in skills/beads-workflow/SKILL.md) and installing pre-commit git hooks (in skills/secrets-guardian/SKILL.md), which persist specialized instructions and security checks in the project repository.
[EXTERNAL_DOWNLOADS]: The README.md and various technology-specific skills (e.g., skills/devops/SKILL.md) provide instructions for downloading software ZIPs, cloning GitHub repositories, and installing packages from official registries (npm, PyPI, crates.io). While standard for development, these instructions should be verified manually.

vibe-coder