The 'skilo add' command in versions 0.5.0 through 0.11.0 improperly handles symbolic links when installing skills by recursively copying skill directories. It follows symbolic links during file copying, resulting in arbitrary local file disclosure if a malicious skill source includes symlinks pointing to sensitive files. This vulnerability allows an attacker to expose files readable by the user running the command, such as SSH keys or cloud credentials. The issue is fixed in version 0.11.1 by rejecting symbolic links during the copy process.