The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill uses the terminal to execute curl for downloading image assets returned by the internal image_generate tool. This is a functional requirement to persist ephemeral image URLs to the project's output directory. The instructions emphasize using absolute paths for the output flag to ensure file system reliability and prevent file misplacement.
[DATA_EXFILTRATION]: The instructions include a specific security safeguard mandating that the agent scan all source content for secrets, such as API keys, tokens, or credentials, and strip them before writing any output to the file system. This effectively prevents the accidental persistence or exposure of sensitive data provided in the comic's source material.
[PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it processes untrusted user-supplied content to generate comic storyboards and subsequent image generation prompts. The risk is mitigated by design through several human-in-the-loop review checkpoints (Step 2, Step 4, and Step 6), allowing the user to inspect and approve the narrative and prompts before image generation occurs.

baoyu-comic