Skip to content

Skill loading executes inline bash patterns from documentation examples #12781

@sjnims

Description

@sjnims

Bug Description

When loading a skill via the Skill tool, inline bash execution patterns (!`...`) within the skill's markdown content are being executed, even when they appear inside fenced code blocks as documentation examples.

Steps to Reproduce

  1. Create or use a skill that contains example command documentation with inline bash patterns
  2. Load the skill using the Skill tool
  3. Observe that bash patterns in code examples are executed

Example

The plugin-dev:command-development skill contains this documentation example in SKILL.md at line 496:

### Workflow Pattern

```markdown
---
description: Complete PR workflow
argument-hint: [pr-number]
allowed-tools: Bash(gh:*), Read
---

PR #$1 Workflow:

1. Fetch PR: !`gh pr view $1`
```

When this skill is loaded, the !`gh pr view $1` pattern executes despite being:

  1. Inside a fenced code block (meant as documentation)
  2. Containing an unsubstituted $1 placeholder

Actual Behavior

Error: Bash command failed for pattern "!`gh pr view $1`": [stderr]
no pull requests found for branch "main"

The skill partially loads but errors because the example bash pattern executed.

Expected Behavior

Inline bash patterns (!`...`) inside fenced code blocks should NOT be executed when loading skills. They are documentation examples, not executable instructions.

Affected Files

  • /plugins/plugin-dev/skills/command-development/SKILL.md (line 496)
  • /plugins/plugin-dev/skills/command-development/references/advanced-workflows.md (line 25)

Workaround

Escape the patterns in documentation using backslashes or alternative formatting to prevent execution during skill loading.

Environment

  • Claude Code CLI
  • macOS

🤖 Generated with Claude Code

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions