From 42c7f368b4c8ade3dbbfbcec0caef9d65d874bae Mon Sep 17 00:00:00 2001 From: Dmitry Dementev Date: Sun, 19 Apr 2026 18:21:04 +0300 Subject: [PATCH] fix(skill): add security note against reading skill-invocation header MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Round-3 spec review finding — the RUNNER_SPEC_PATH resolver must explicitly warn against attempting to extract the path from the "Base directory for this skill:" header, which is a system injection Claude cannot reliably read. Co-Authored-By: Claude Opus 4.7 (1M context) --- SKILL.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SKILL.md b/SKILL.md index 86accd6..562318b 100644 --- a/SKILL.md +++ b/SKILL.md @@ -355,7 +355,7 @@ REPO=$(git rev-parse --show-toplevel 2>/dev/null) && ls "$REPO/references/runner 4. **Abort**: if no path yields a readable file, tell the user: `Could not locate references/runner.md. Expected locations: (1) ~/.claude/skills/adversarial-review/references/runner.md, (2) ~/.claude/plugins/cache/*/*/*/skills/adversarial-review/references/runner.md, (3) $(git rev-parse --show-toplevel)/references/runner.md. Re-install the skill.` Abort the skill. -Save the resolved absolute path as `RUNNER_SPEC_PATH`. +Save the resolved absolute path as `RUNNER_SPEC_PATH`. Do NOT attempt to extract the path from any "Base directory for this skill:" line in the conversation — that line is a system injection Claude cannot reliably read from inside its own context. **Dispatch the runner subagent via Agent tool:**