The Agent Skills Directory

[PERSISTENCE]: The skill provides instructions to modify the user's shell configuration file (~/.bashrc) to make the PATH changes for the installed Node.js binary persistent across different sessions.
[REMOTE_CODE_EXECUTION]: The skill downloads and installs the qhkit CLI tool from a remote registry and provides a manual installation path for Node.js binaries from official sources (nodejs.org) if they are missing from the host environment.
[COMMAND_EXECUTION]: The agent is instructed to execute a wide variety of shell commands, including npm, curl, tar, and specific CLI tools for environment setup, configuration, and image generation.
[DYNAMIC_EXECUTION]: The skill uses dynamic code execution for image processing, including invoking a Python one-liner (python -c) and using npx to execute the sharp-cli tool at runtime.
[EXTERNAL_DOWNLOADS]: The skill fetches resources from external domains, including official Node.js distribution servers, the npm registry, and various established mirrors such as Alibaba's npmmirror and Tsinghua University's PyPI mirror for reliable dependency installation.
[INDIRECT_PROMPT_INJECTION]: The skill processes external, untrusted data including user-provided images and text descriptions which are passed to generation tools, creating a potential surface for indirect injection.
Ingestion points: User-supplied image files (uploadedImages) and custom text strings (customCopy) processed via the qhkit tool.
Boundary markers: None identified; input is passed as JSON fields to the CLI.
Capability inventory: The skill has capabilities for subprocess execution, file system access, and network communication via the qhkit CLI.
Sanitization: No specific input sanitization or validation logic is defined for the agent to perform before tool invocation.

linkpix-amazon-image