Skill loading executes inline bash patterns from documentation examples

Resolved 💬 11 comments Opened Dec 1, 2025 by sjnims Closed Apr 27, 2026

Bug Description

When loading a skill via the Skill tool, inline bash execution patterns (` !... `) within the skill's markdown content are being executed, even when they appear inside fenced code blocks as documentation examples.

Steps to Reproduce

  1. Create or use a skill that contains example command documentation with inline bash patterns
  2. Load the skill using the Skill tool
  3. Observe that bash patterns in code examples are executed

Example

The plugin-dev:command-development skill contains this documentation example in SKILL.md at line 496:

~~~markdown

Workflow Pattern

---
description: Complete PR workflow
argument-hint: [pr-number]
allowed-tools: Bash(gh:*), Read
---

PR #$1 Workflow:

1. Fetch PR: !`gh pr view $1`

~~~

When this skill is loaded, the ` !gh pr view $1 ` pattern executes despite being:

  1. Inside a fenced code block (meant as documentation)
  2. Containing an unsubstituted $1 placeholder

Actual Behavior

Error: Bash command failed for pattern "!`gh pr view $1`": [stderr]
no pull requests found for branch "main"

The skill partially loads but errors because the example bash pattern executed.

Expected Behavior

Inline bash patterns (` !... `) inside fenced code blocks should NOT be executed when loading skills. They are documentation examples, not executable instructions.

Affected Files

  • /plugins/plugin-dev/skills/command-development/SKILL.md (line 496)
  • /plugins/plugin-dev/skills/command-development/references/advanced-workflows.md (line 25)

Workaround

Escape the patterns in documentation using backslashes or alternative formatting to prevent execution during skill loading.

Environment

  • Claude Code CLI
  • macOS

🤖 Generated with Claude Code

View original on GitHub ↗

This issue has 11 comments on GitHub. Read the full discussion on GitHub ↗