The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes a bash command chain including find, xargs, and grep to scan the local filesystem for markdown files containing business metrics. This operation is limited to information retrieval necessary for the skill's primary function.
[PROMPT_INJECTION]: The skill reads external data from local .md files to populate its templates. While this technically constitutes an attack surface for indirect prompt injection, the risk is negligible as the skill lacks high-risk capabilities like network exfiltration or destructive file operations.
[DATA_EXPOSURE]: The skill processes account data such as ARR tiers and adoption metrics. However, there is no evidence of this data being transmitted to external servers or being stored insecurely; it is used only to generate the output for the user.
[SAFE]: No obfuscation, hardcoded credentials, remote code execution, or persistence mechanisms were found in the skill code.

keep-qbr