The Agent Skills Directory

[COMMAND_EXECUTION]: The skill's scripts (niri.py, niri_ctl.py) use subprocess.run to execute the niri CLI tool. These calls pass arguments as a list, which prevents shell injection vulnerabilities by ensuring arguments are not interpreted by a shell.
[DATA_EXPOSURE]: The skill accesses the local Niri IPC socket defined by the $NIRI_SOCKET environment variable. This is necessary for its intended functionality and does not involve external network connections or access to sensitive user credentials or configuration files.
[REMOTE_CODE_EXECUTION]: No patterns of remote script downloading, execution, or dynamic code generation were detected. All executable content is contained within the skill's own local scripts and works within the local environment.

niri-ipc