The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/manage-humans-registry.sh constructs a jq filter string by directly interpolating shell variables such as $NAME and $LEVEL in the action_update function. This pattern is vulnerable to jq injection, where a crafted input could break out of the intended logic to modify other parts of the JSON registry or cause execution errors.
[CREDENTIALS_UNSAFE]: The script scripts/create-human.sh accesses a sensitive local secrets file at /data/hiclaw-secrets.env to retrieve administrative tokens and passwords. Additionally, the script outputs the generated password for new human accounts in plain text within the final JSON result, which could lead to accidental credential exposure if the agent's output is logged or shared.

human-management