Skip to main content

prompt-executor

Executes prompts from a specified directory using various AI models, enabling task delegation and verification loops.

Install this skill

or
74/100

Security score

The prompt-executor skill was audited on Mar 1, 2026 and we found 10 security issues across 1 threat category. Review the findings below before installing.

Categories Tested

Security Issues

medium line 9

Access to hidden dotfiles in home directory

SourceSKILL.md
9- Bash(python3 ~/.claude/plugins/cache/daplug/daplug/*/skills/prompt-executor/scripts/executor.py:*)
medium line 34

Access to hidden dotfiles in home directory

SourceSKILL.md
34If the user has to manually confirm the executor bash command, suggest they add this rule to `~/.claude/settings.json` under `permissions.allow`:
low line 37

Access to hidden dotfiles in home directory

SourceSKILL.md
37"Bash(PLUGIN_ROOT=$(jq -r '.plugins.\"daplug@cruzanstx\"[0].installPath' ~/.claude/plugins/installed_plugins.json):*)"
low line 43

Access to hidden dotfiles in home directory

SourceSKILL.md
43jq '.permissions.allow += ["Bash(PLUGIN_ROOT=$(jq -r '"'"'.plugins.\"daplug@cruzanstx\"[0].installPath'"'"' ~/.claude/plugins/installed_plugins.json):*)"]' ~/.claude/settings.json > /tmp/settings.json
low line 65

Access to hidden dotfiles in home directory

SourceSKILL.md
65PLUGIN_ROOT=$(jq -r '.plugins."daplug@cruzanstx"[0].installPath' ~/.claude/plugins/installed_plugins.json)
low line 99

Access to hidden dotfiles in home directory

SourceSKILL.md
99PLUGIN_ROOT=$(jq -r '.plugins."daplug@cruzanstx"[0].installPath' ~/.claude/plugins/installed_plugins.json)
low line 184

Access to hidden dotfiles in home directory

SourceSKILL.md
184"loop_log": "~/.claude/cli-logs/codex-123-loop-20251229-120000.log",
low line 185

Access to hidden dotfiles in home directory

SourceSKILL.md
185"state_file": "~/.claude/loop-state/123.json",
medium line 192

Access to hidden dotfiles in home directory

SourceSKILL.md
192Log paths follow `cli_logs_dir` from `<daplug_config>` if configured (default `~/.claude/cli-logs/`).
medium line 236

Access to hidden dotfiles in home directory

SourceSKILL.md
236**OpenCode permissions (headless runs):** configure `~/.config/opencode/opencode.json` to avoid interactive permission prompts, e.g.:
Scanned on Mar 1, 2026
View Security Dashboard