The Agent Skills Directory

[SAFE]: The skill implements a restricted environment by scoping the Bash tool only to a specific local discovery script. This minimizes the risk of arbitrary command execution.
[COMMAND_EXECUTION]: The scripts/scan-plaintext-files.sh script is used to find relevant files. It includes robust filtering to skip sensitive directories like node_modules, vendor, and environment files, ensuring that only prose files are processed.
[EXTERNAL_DOWNLOADS]: The test suite (tests/run-tests.sh) includes a command to clone the bats-core repository from GitHub. This is a well-known service and the operation is safe.
[DATA_EXFILTRATION]: While the skill reads project content, it does not have access to networking tools, ensuring that data cannot be transmitted externally.

plain-language