the-agency-ai/src/claude/skills/run-in
src/claude/skills/run-in/SKILL.md
Run a command in a target directory without touching the parent shell's CWD. Use any time you would write "cd foo && bar" — that pattern is blocked by the block-compound-bash hookify rule.
$ install --global
skillsauthnpx skillsauth add the-agency-ai/the-agency src/claude/skills/run-inInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 22, 2026, 11:31 AM135.3s1 file scanned
SKILL.md
- description:
- Run a command in a target directory without touching the parent shell's CWD. Use any time you would write "cd foo && bar" — that pattern is blocked by the block-compound-bash hookify rule.
run-in
Run a command in a target directory via a subshell. The parent shell's CWD is never touched. Exit code is propagated. Standard Agency telemetry.
When to use
- You would otherwise write
cd foo && bar && cd -— don't. Userun-in. - You need to run an Agency tool on another repo (e.g.,
agency verifyon a downstream installation). - You need to run a git command on another worktree without leaving your shell parked in that worktree.
- You want observability on the directory-scoped execution (log_start / log_end are built in).
Signature
run-in <target-dir> -- <command> [args...]
The -- separator is required and distinguishes the target directory from
the command and its argv.
Examples
# Run a command on another repo without leaking CWD
./agency/tools/run-in ~/code/presence-detect -- ./agency/tools/agency verify
# Run a git command in a worktree from your captain shell
./agency/tools/run-in .claude/worktrees/devex -- git status
# Run a test suite in a sandbox dir
./agency/tools/run-in "$BATS_TEST_TMPDIR/mock" -- bats mock.bats
What NOT to do
# ❌ BLOCKED by hookify.block-compound-bash
cd ~/code/presence-detect && agency verify
# ❌ BLOCKED (parent shell CWD leaks)
cd .claude/worktrees/devex && git status && cd -
# ✅ Use run-in instead
./agency/tools/run-in ~/code/presence-detect -- agency verify
./agency/tools/run-in .claude/worktrees/devex -- git status
Why subshell isolation matters
Agent identity resolution uses the current working directory to determine
which agent is running (via agent-identity). If a worktree agent cds to
the main checkout and forgets to cd -, subsequent commands resolve the
wrong identity, handoffs write to the wrong file, and dispatches go to the
wrong agent. run-in runs the command in a subshell — the parent shell's
CWD is untouchable by construction, so identity resolution stays correct.
Related
- Hookify rule:
agency/hookify/hookify.block-compound-bash.md - Tool:
agency/tools/run-in - Companion seed: telemetry-mining for compound command patterns (flag #54)
OFFENDERS WILL BE FED TO THE — CUTE — ATTACK KITTENS!
Related Skills
the-agency-ai/src/claude/skills/worktree-sync
business
VerifiedTrustedCommunity
Sync worktree with master — merge, copy settings, run sandbox-sync, report changes
5SKILL.mdUpdated Apr 22, 2026
the-agency-ai/src/claude/skills/worktree-list
tools
VerifiedTrustedCommunity
List all git worktrees with status info (branch, clean/dirty, deps)
5SKILL.mdUpdated Apr 22, 2026
the-agency-ai/src/claude/skills/worktree-delete
tools
VerifiedTrustedCommunity
Remove a git worktree and optionally delete its branch
5SKILL.mdUpdated Apr 22, 2026
the-agency-ai/src/claude/skills/worktree-create
development
VerifiedTrustedCommunity
Create a new git worktree with dedicated branch and bootstrapped dev environment
5SKILL.mdUpdated Apr 22, 2026