install-bensz-skills
Facilitates the installation of skills from a repository to Codex and Claude Code, ensuring version control and easy access.
Install this skill
Security score
The install-bensz-skills skill was audited on May 12, 2026 and we found 13 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 146 | ```bash |
Access to hidden dotfiles in home directory
| 4 | description: "当需要把本仓库 pipelines/skills 下的所有 skills 安装到系统级（默认同时安装到 Codex: ~/.codex/skills 和 Claude Code: ~/.claude/skills），以便在任意项目/对话中可被发现与调用时使用。使用 MD5 哈希进行版本控制，仅安装有更新的 skills；支持强制覆盖安装、指定单一目标安装和远程安装模式（ |
Access to hidden dotfiles in home directory
| 15 | - 因本 skill 设计缺陷导致的 bug，先用 `bensz-collect-bugs` 规范记录到 `~/.bensz-skills/bugs/`，不要直接修改用户本地已安装的 skill 源码；若有 workaround，先记 bug，再继续完成任务。 |
Access to hidden dotfiles in home directory
| 20 | - Codex：`~/.codex/skills/` |
Access to hidden dotfiles in home directory
| 21 | - Claude Code：`~/.claude/skills/` |
Access to hidden dotfiles in home directory
| 42 | 执行时不要检查当前项目目录下是否存在 `./install-bensz-skills/scripts/install.py`，也不要把本地脚本作为优先入口。触发本 skill 后，直接从系统级已安装位置查找安装器脚本：优先 `~/.codex/skills/install-bensz-skills/scripts/install.py`，其次 `~/.claude/skills/install-b |
Access to hidden dotfiles in home directory
| 91 | python3 ~/.codex/skills/install-bensz-skills/scripts/install.py |
Access to hidden dotfiles in home directory
| 94 | python3 ~/.claude/skills/install-bensz-skills/scripts/install.py |
Access to hidden dotfiles in home directory
| 97 | python3 ~/.codex/skills/install-bensz-skills/scripts/install.py --source ./skills |
Access to hidden dotfiles in home directory
| 116 | 1. 创建临时目录 `~/.bensz-skills/installation/tmp-remote-install` |
Access to hidden dotfiles in home directory
| 142 | 安装前会先读取 `install-bensz-skills/config.yaml` 中的 `legacy_skill_names`，并从 `~/.codex/skills/` / `~/.claude/skills/` 删除这些已弃用旧名，避免 skill 改名后旧目录继续留在系统级目录里干扰触发。 |
Access to hidden dotfiles in home directory
| 304 | - **临时目录未清理**：手动删除 `~/.bensz-skills/installation/tmp-remote-install` 目录。 |
Access to hidden dotfiles in home directory
| 305 | - **安装记录与临时目录在哪里**：统一保存在 `~/.bensz-skills/installation/` 下；其中 manifest 在 `~/.bensz-skills/installation/manifests/`，远程安装临时目录在 `~/.bensz-skills/installation/tmp-remote-install`。 |