The Agent Skills Directory

[Remote Code Execution] (MEDIUM): The file SKILL.md provides a Python code snippet for extracting metrics that uses pickle.load(). Pickle is insecure because it can execute arbitrary code during the deserialization of tampered or malicious files.\n- [External Downloads] (MEDIUM): The file SKILL.md instructs the user to clone the AlphaFold repository from https://github.com/deepmind/alphafold.git. Since the deepmind organization is not in the defined trusted source list, this is flagged as an external code download concern.\n- [Command Execution] (LOW): The file references/multimer.md contains a bash script for batch processing that incorporates file paths directly into shell commands. This pattern can be vulnerable to command injection if filenames contain shell metacharacters and are not properly sanitized.

alphafold