The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill facilitates the processing of configuration files (pyproject.toml, uv.lock) which may be provided by untrusted project environments.
Ingestion points: pyproject.toml and uv.lock files referenced throughout SKILL.md.
Boundary markers: Absent; there are no instructions to verify the source or integrity of these files before processing.
Capability inventory: The skill employs uv commands (such as uv sync, uv add, uv lock) which perform file system modifications and network operations to download and install dependencies.
Sanitization: No explicit sanitization or validation of the contents of the configuration files is specified before they are processed by the tool.
[EXTERNAL_DOWNLOADS]: The skill references downloads from well-known and reputable sources for tool installation.
Fetches the official uv binary from the GitHub Container Registry (ghcr.io/astral-sh/uv:latest) within Dockerfile examples.
References the official GitHub Action for uv (astral-sh/setup-uv@v1) for CI/CD workflows.
[COMMAND_EXECUTION]: The skill uses standard CLI commands for Python environment management.
Executes uv commands for dependency resolution and environment synchronization, which is the primary and intended purpose of the skill.

python-uv