The Agent Skills Directory

[COMMAND_EXECUTION]: The get_with_cache function utilizes eval "$command" to execute a shell command string passed as an argument. This is a dangerous coding pattern that facilitates command injection if the command string is constructed using untrusted external input.
[EXTERNAL_DOWNLOADS]: The skill provides examples of fetching remote data via curl from external domains. While intended as a placeholder, it encourages network operations within scripts that handle sensitive configuration.
[COMMAND_EXECUTION]: Configuration management functions use sed -i and grep to modify and read local files. These operations lack input validation or escaping, creating a vulnerability surface if configuration keys or values are derived from untrusted sources.

state-directory-manager