Plugin: discovery · Category: machine-path leakage (4) — borderline, low severity
Source: work-readiness sweep (read-only audit vs docs/PLUGIN-PHILOSOPHY.md + docs/MIGRATION-PLAYBOOK.md)
Findings
plugins/discovery/skills/explore/SKILL.md:13 and plugins/discovery/skills/explore-deep/SKILL.md:15 — Project root: !git rev-parse --show-toplevel 2>/dev/null || echo "unknown"``
Why flagged
Injects the consumer's absolute machine path into skill context at load. EXPLORE.md is a handoff artifact — the absolute root can bleed into the persisted file, making handoffs machine-specific. It is the consumer's own path computed live (not author-baked), so agnosticism holds; this is machine-path material entering a generated-artifact surface only.
Fix direction
Keep the live root for orientation if useful, but have EXPLORE.md templates mandate repo-relative paths so the absolute root is never echoed into the persisted artifact.
Plugin:
discovery· Category: machine-path leakage (4) — borderline, low severitySource: work-readiness sweep (read-only audit vs docs/PLUGIN-PHILOSOPHY.md + docs/MIGRATION-PLAYBOOK.md)
Findings
plugins/discovery/skills/explore/SKILL.md:13andplugins/discovery/skills/explore-deep/SKILL.md:15—Project root: !git rev-parse --show-toplevel 2>/dev/null || echo "unknown"``Why flagged
Injects the consumer's absolute machine path into skill context at load. EXPLORE.md is a handoff artifact — the absolute root can bleed into the persisted file, making handoffs machine-specific. It is the consumer's own path computed live (not author-baked), so agnosticism holds; this is machine-path material entering a generated-artifact surface only.
Fix direction
Keep the live root for orientation if useful, but have EXPLORE.md templates mandate repo-relative paths so the absolute root is never echoed into the persisted artifact.