The Agent Skills Directory

[COMMAND_EXECUTION]: The shell script in Step 4 contains a command injection vulnerability. The variable MIN_SEV, derived from the user-controlled SECSKILL_MIN_SEVERITY environment variable, is interpolated unquoted into a subshell: $(echo $MIN_SEV | tr '[:lower:]' '[:upper:]'). A maliciously crafted input could execute arbitrary shell commands.
[EXTERNAL_DOWNLOADS]: The skill's prerequisite instructions provide steps to download and install the trivy vulnerability scanner from Aqua Security's official repository using wget and apt-get.
[EXTERNAL_DOWNLOADS]: The skill recommends installing the pip-audit tool from the Python Package Index (PyPI).
[COMMAND_EXECUTION]: The workflow executes npm install --package-lock-only within the target project's directory. This behavior can be exploited to run arbitrary scripts (e.g., npm preinstall or postinstall hooks) if the project being audited is malicious.

dependency-audit