The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The Dockerfile fetches the uv package manager from the ghcr.io/astral-sh/uv repository, which is a well-known service provided by the Astral organization.
[INDIRECT_PROMPT_INJECTION]: The skill provides patterns for fetching external data via httpx (e.g., fetch_external_data) and processing it within the application.
Ingestion points: fetch_external_data function in SKILL.md using httpx.AsyncClient.
Boundary markers: Not explicitly defined in the code snippets; relies on standard Pydantic validation.
Capability inventory: Network requests (httpx), database operations (sqlalchemy), and user management logic.
Sanitization: Input is validated using Pydantic schemas, but the content of external API responses is treated as trusted data structure after parsing.
[DYNAMIC_EXECUTION]: The sorting logic in references/dependency-injection-patterns.md uses getattr(Item, sort.field) to dynamically access model attributes based on user-supplied query parameters. If not constrained by an allowlist, this could allow external users to sort by or potentially expose the existence of internal model attributes not intended for public filtering.

python-fastapi