The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The RedisCache template in SKILL.md and the FileCache template in references/templates.md utilize the unserialize() function on data retrieved from external sources like Redis and the local filesystem. Deserializing data from these sources is insecure as it allows for PHP Object Injection, which can lead to Remote Code Execution if an attacker can manipulate the stored data.\n- [COMMAND_EXECUTION]: The FileCache implementation in references/templates.md uses mkdir() with 0777 permissions. This results in the creation of world-writable directories, which is a security risk in shared environments as it allows any local user to read, modify, or delete the cache files.

create-psr16-simple-cache