Method executeInlineShell

skills/prompt_processor.go:156–200

(content string, skill SkillSpec, approveProjectShell func(SkillShellPermissionRequest) bool)

func (p *PromptProcessor) executeInlineShell(content string, skill SkillSpec, approveProjectShell func(SkillShellPermissionRequest) bool) (string, error) {
	re := regexp.MustCompile("(?s)!`(?P<command>.+?)`")
	matches := re.FindAllStringSubmatchIndex(content, -1)
	if len(matches) == 0 {
		return content, nil
	}
	var commands []string
	for _, match := range matches {
		command := strings.TrimSpace(content[match[2]:match[3]])
		decision := DecideInlineShellExecution(skill, command)
		if !decision.Allowed {
			return "", fmt.Errorf("%s", decision.Reason)
		}
		if decision.RequiresApproval {
			if approveProjectShell == nil || !approveProjectShell(SkillShellPermissionRequest{SkillName: skill.CanonicalName, Command: command}) {
				return "", fmt.Errorf("Skill '%s' shell command was denied: %s", skill.CanonicalName, command)
			}
		}
		commands = append(commands, command)
	}
	var replacements []string
	for _, command := range commands {
		runCWD := skill.Directory
		if runCWD == "" {
			runCWD = p.Config.CWD
		}
		if err := RunShellSafetyChecks(command, runCWD); err != nil {
			return "", err
		}
		output, err := p.runInlineShell(command, skill.Directory, optionalValue(skill.Frontmatter.Shell))
		if err != nil {
			return "", err
		}
		replacements = append(replacements, output)
	}
	var rendered strings.Builder
	cursor := 0
	for i, match := range matches {
		rendered.WriteString(content[cursor:match[0]])
		rendered.WriteString(replacements[i])
		cursor = match[1]
	}
	rendered.WriteString(content[cursor:])
	return rendered.String(), nil
}

func (p *PromptProcessor) runInlineShell(command, cwd, executable string) (string, error) {
	runCWD := cwd
	if runCWD == "" {