The Agent Skills Directory

[COMMAND_EXECUTION]: The skill automates workflows by executing local Python scripts via the uv run command. These scripts handle preflight initialization, project inventory, and complex pipeline parsing.
[EXTERNAL_DOWNLOADS]: The skill provides instructions for the user to install or restore the environment using npx bmad-module-skill-forge, which fetches packages from the well-known npm registry. It also references official documentation for the uv tool installation from astral.sh.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze external codebases and package metadata (via AN and QS capabilities) to generate agent instructions, which presents a vulnerability surface for indirect prompt injection.
Ingestion points: Processes codebase content from the local project root and fetches data from external GitHub URLs or package registries.
Boundary markers: The instructions explicitly prioritize "AST first" and "Zero hallucination tolerance," requiring the agent to rely on structural code parsing rather than semantic interpretation of text.
Capability inventory: The skill utilizes shell execution for Python scripts and performs file read/write operations within the dedicated _bmad/ project folder.
Sanitization: By enforcing Abstract Syntax Tree (AST) analysis, the skill ensures that generated instructions are derived from verifiable code structures, mitigating the risk of following natural language instructions embedded in comments or data.

skf-forger