{
  "id": 19964880,
  "title": "A Skill Can Run Commands Before Claude Reads It: What to Check First",
  "url": "https://urgent.news/2026/11/14/a-skill-can-run-commands-before-claude-reads-it-what-to-check-first",
  "topic": "ai",
  "section": "AI",
  "published": "2026-11-14T10:42:05.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/promptmaster/a-skill-can-run-commands-before-claude-reads-it-what-to-check-first-20b5"
  },
  "original_language": "en",
  "account": "You have discovered a GitHub skill that writes release notes and copied it into your Claude Code skills directory. Upon running it, you were surprised to learn that the skill folder contains more than just plain text. In Claude Code, certain elements within the folder can execute shell commands before Claude reads the skill's content, pre-approve tools, or register hooks that remain active throughout the session. This behavior is not immediately evident from the instructions, but it is crucial to understand before installing someone else's skill.",
  "summary": "You find a skill on GitHub that writes release notes. It looks harmless: a SKILL.md with a description and a few lines of instructions. You copy the folder into .claude/skills/ , ask for release notes, and it works. What you may not have checked is that a skill isn't only text. In Claude Code, a few lines in that file can run shell commands before Claude reads anything, pre-approve tools, or…",
  "key_points": [
    "GitHub skill can execute shell commands before Claude reads content",
    "Pre-approve tools and register hooks remain active throughout session",
    "Behavior not immediately evident from instructions"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}