The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes the Bash tool to manage temporary files and system clipboard utilities such as pbcopy, xclip, or xsel. It dynamically generates a shell script incorporating the text to be copied at runtime.
[PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection via the heredoc mechanism used in its Bash script. If the content being copied contains the delimiter 'EOF' on a line by itself, the script will terminate the file-write operation early and execute any subsequent text as shell commands. Ingestion points: Text content provided to the workflow in SKILL.md; Boundary markers: Single-quoted heredoc delimiters ('EOF') are used to prevent variable expansion, but do not prevent delimiter collision; Capability inventory: Access to the Bash shell, ability to write to the /tmp/ directory, and execution of local clipboard binaries; Sanitization: No validation or escaping of the input text is performed to prevent collision with the shell delimiter.

txt-copy