The Agent Skills Directory

REMOTE_CODE_EXECUTION (CRITICAL): The automated scan confirmed the presence of piped remote execution patterns (curl | bash and curl | sh). Specifically, scripts from https://raw.githubusercontent.com/ajeetdsouza/zoxide/main/install.sh and https://starship.rs/install.sh are executed directly. These sources are not on the Trusted External Sources list, making this a critical security risk.\n- COMMAND_EXECUTION (MEDIUM): The skill utilizes eval "$(zoxide init bash)", which is a dynamic code execution pattern. If the zoxide binary or its configuration is compromised, it can lead to arbitrary shell command execution.\n- EXTERNAL_DOWNLOADS (LOW): The skill recommends installing several third-party utilities (jq, fzf, ripgrep, etc.) via brew. While these are popular developer tools, they represent unverified external dependencies within the context of this skill's security posture.

cli-productivity