The Agent Skills Directory

[DYNAMIC_EXECUTION]: The module scripts/coverage_analyzer.py utilizes xml.etree.ElementTree.fromstring() to parse XML-based coverage reports (e.g., Cobertura). This specific XML parser is not secure against maliciously constructed data and is vulnerable to XML External Entity (XXE) attacks, which could be used to read local files or perform server-side request forgery (SSRF).
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external, untrusted data including source code files and test coverage reports. This creates a vulnerability where an attacker could embed malicious instructions (e.g., within code comments or XML metadata) that the agent might inadvertently execute while performing analysis or test generation.
Ingestion points: scripts/test_generator.py accepts source code via the --input flag, and scripts/coverage_analyzer.py accepts coverage reports via the --report flag.
Boundary markers: Absent. The skill does not employ specific delimiters or instructions to the agent to treat the ingested file content as purely passive data.
Capability inventory: The skill utilizes file system access (read/write) and executes local Python scripts to perform its functions.
Sanitization: No sanitization or validation of the content within the ingested files is performed before processing.

tdd-guide