The Agent Skills Directory

[PROMPT_INJECTION]: The skill contains instructions directing the agent to "ALWAYS invoke this skill at the START of every session," which attempts to override default session behavior and establish the skill as a persistent startup routine.- [REMOTE_CODE_EXECUTION]: The skill explicitly prompts the user to install external code via npx skills add obra/superpowers, which involves downloading and executing software from a third-party source not included in the trusted vendors list.- [COMMAND_EXECUTION]: The skill uses the eval command in references/platform-cleanup.md to process environment variables and paths defined in a JSON configuration file, which can lead to arbitrary command execution if the input strings are manipulated.- [COMMAND_EXECUTION]: The skill performs broad and potentially destructive filesystem operations, including the recursive deletion (rm -rf) of various directories and mass modification of script execution permissions (chmod +x) across the project.- [EXTERNAL_DOWNLOADS]: The documentation identifies and recommends the installation of several external tools (e.g., jq, uv, gh, fswatch) using brew install, which triggers remote software downloads.- [DATA_EXFILTRATION]: The skill extracts the absolute filesystem path of the repository using git rev-parse --show-toplevel and uses it to generate a project-specific slug for creating persistent cache directories in the user's home folder, thereby exposing local environment metadata.

swain-doctor