Skill loading executes inline bash patterns from documentation examples
Bug Description
When loading a skill via the Skill tool, inline bash execution patterns (` !... `) within the skill's markdown content are being executed, even when they appear inside fenced code blocks as documentation examples.
Steps to Reproduce
- Create or use a skill that contains example command documentation with inline bash patterns
- Load the skill using the Skill tool
- Observe that bash patterns in code examples are executed
Example
The plugin-dev:command-development skill contains this documentation example in SKILL.md at line 496:
~~~markdown
Workflow Pattern
---
description: Complete PR workflow
argument-hint: [pr-number]
allowed-tools: Bash(gh:*), Read
---
PR #$1 Workflow:
1. Fetch PR: !`gh pr view $1`
~~~
When this skill is loaded, the ` !gh pr view $1 ` pattern executes despite being:
- Inside a fenced code block (meant as documentation)
- Containing an unsubstituted
$1placeholder
Actual Behavior
Error: Bash command failed for pattern "!`gh pr view $1`": [stderr]
no pull requests found for branch "main"
The skill partially loads but errors because the example bash pattern executed.
Expected Behavior
Inline bash patterns (` !... `) inside fenced code blocks should NOT be executed when loading skills. They are documentation examples, not executable instructions.
Affected Files
/plugins/plugin-dev/skills/command-development/SKILL.md(line 496)/plugins/plugin-dev/skills/command-development/references/advanced-workflows.md(line 25)
Workaround
Escape the patterns in documentation using backslashes or alternative formatting to prevent execution during skill loading.
Environment
- Claude Code CLI
- macOS
🤖 Generated with Claude Code
This issue has 11 comments on GitHub. Read the full discussion on GitHub ↗