The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses subprocess.run to execute pdftotext (a standard utility) for verifying the content of downloaded datasheets in fetch_datasheet_mouser.py. It also attempts to run a sibling script analyze_schematic.py in sync_datasheets_mouser.py to extract part numbers from KiCad schematic files.
[CREDENTIALS_UNSAFE]: The documentation in SKILL.md provides instructions on how to set the MOUSER_SEARCH_API_KEY environment variable. It also shows a common pattern for loading secrets from a file (export $(grep -v '^#' ~/.config/secrets.env | xargs)). This is standard development practice and no actual secrets are hardcoded in the skill.
[EXTERNAL_DOWNLOADS]: The skill downloads datasheet PDF files from Mouser's official domains and manufacturer websites (e.g., mouser.com, ti.com, microchip.com). These are well-known, trusted industry sources for electronic component documentation.
[DYNAMIC_EXECUTION]: The skill includes an optional dependency on playwright to use a headless browser for downloading datasheets from websites that require JavaScript. This is used as a fallback mechanism for legitimate content retrieval.
[INDIRECT_PROMPT_INJECTION]: The skill processes external data from KiCad schematics and Mouser API responses. It implements several mitigations, including strict MPN filtering (is_real_mpn), filename sanitization, and content verification of the resulting PDF files to ensure they match the expected part number and manufacturer.

mouser