The Agent Skills Directory

[Command Execution] (MEDIUM): Documentation in references/performance-tuning.md includes a sudo command to modify system kernel parameters in /etc/sysctl.conf. It also recommends modifying shell startup files (~/.zshrc) to load external code, which is a persistence mechanism. The benchmarking script scripts/benchmark-prompt.zsh executes the interactive shell environment to measure startup latency.
[External Downloads] (LOW): Multiple files recommend cloning repositories from GitHub accounts not on the Trusted External Sources list, including romkatv/zsh-bench, romkatv/powerlevel10k, and softmoth/zsh-vim-mode. While common in the shell customization community, these are unverifiable third-party sources.
[Indirect Prompt Injection] (LOW): The script scripts/benchmark-prompt.zsh ingests output from external tools like git status and starship timings without explicit sanitization. 1. Ingestion points: detect_prompt, git status output in benchmark-prompt.zsh. 2. Boundary markers: Absent. 3. Capability inventory: Local command execution and file reads. 4. Sanitization: None.

shell-prompt