The Agent Skills Directory

[COMMAND_EXECUTION]: The server implements an automatic discovery mechanism that scans directories (specified by flag, environment variable, or system PATH) and executes any file starting with the okf- prefix to retrieve its schema.
Evidence: Found in discover.go in the discoverSkills and loadSchema functions, where exec.CommandContext(ctx, bin, "schema") is called on every matching binary found during the scan.
[COMMAND_EXECUTION]: When an agent calls a tool, the skill translates the request into a command-line execution of a local binary.
Evidence: Implementation in main.go using exec.CommandContext(ctx, bin, argv...). While the code safely avoids shell injection by passing arguments as a slice, it still performs dynamic execution of external binaries.
[EXTERNAL_DOWNLOADS]: The skill instructions direct users to download and install the server binary from a remote repository.
Evidence: SKILL.md contains the command go install github.com/xSAVIKx/okf-skills/okf-mcp@v0.1.0. The download source is controlled by the skill's author.

okf-mcp