The Agent Skills Directory

[COMMAND_EXECUTION]: The skill manages deployment by executing Git commands such as clone, commit, and push using subprocess.run with argument lists. This approach prevents shell injection vulnerabilities. User-provided slug inputs are processed through a restrictive sanitization function that permits only alphanumeric characters and hyphens, ensuring that file paths remain within the intended repository structure.
[EXTERNAL_DOWNLOADS]: The skill optionally downloads and executes the Pillow library via the uv package manager to optimize images before publication. Both Pillow and uv are well-known, trusted tools in the software development community. The skill handles cases where these tools are missing by falling back to publishing original files, ensuring robust operation without compromising security.

sourcecraft-publisher