The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses the Bash tool to execute shell commands and Python scripts. In scripts/templatize.py, the astria CLI tool is invoked using subprocess.run. The arguments are passed as a list, which avoids shell interpretation and prevents standard command injection vulnerabilities.
[EXTERNAL_DOWNLOADS]: The skill performs network operations to fetch content from user-provided URLs. scripts/scrape.py fetches webpage HTML using urllib or the optional curl_cffi library, while scripts/templatize.py fetches image headers to determine aspect ratios. Additionally, the agent uses curl to download lifestyle images to a temporary directory for processing. These operations are core to the skill's functionality as a lookbook scraper.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data from the internet.
Ingestion points: scripts/scrape.py extracts titles and image metadata from target webpages.
Boundary markers: The instructions direct the agent to "trim marketing cruft" from titles before using them as pack names.
Capability inventory: The skill possesses the ability to write to the local filesystem, perform network requests, and execute API operations via the astria CLI.
Sanitization: Data is passed between scripts using structured JSON format, reducing the risk of malformed data influencing script execution logic.
[DATA_EXPOSURE]: The skill interacts with the Astria API via a bundled CLI tool. This approach delegates authentication and credential management to the CLI's configuration, preventing the need for hardcoded secrets or sensitive environment variables within the skill's own code.
[DYNAMIC_EXECUTION]: The scripts/templatize.py script reads a JSON specification file (spec.json) created by the agent to define the silhouette-swap workflow. The script processes this structured data to generate API requests, representing a controlled data-driven execution flow rather than arbitrary code execution.

templatize-page