Runs two helper scripts through a small run(cmd, cwd) wrapper around
subprocess.run. cmd is a genuine function parameter of run, so it reads as
tainted from run's own point of view — but both real call sites in this file pass a
literal, fully hardcoded command list with a fixed interpreter, never anything
attacker-influenced. This must not be a CRITICAL vet failure.
1---2name: wrapperskill3description: Wrapper Skill4---56# Wrapper Skill78Runs two helper scripts through a small `run(cmd, cwd)` wrapper around9`subprocess.run`. `cmd` is a genuine function parameter of `run`, so it reads as10tainted from `run`'s own point of view — but both real call sites in this file pass a11literal, fully hardcoded command list with a fixed interpreter, never anything12attacker-influenced. This must not be a CRITICAL vet failure.
Run npx skillmds@latest add gl0di/wrapperskill in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.
Wrapper Skill It is listed under Coding & Dev Tools on SkillMD.
This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.
This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.
Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.
gl0di (@gl0di) published this skill. Their other Agent Skills are listed on their SkillMD profile.
gl0di