The Agent Skills Directory

[PERSISTENCE]: The skill instructs the agent to modify the user's shell configuration file (~/.bashrc) to permanently update the PATH environment variable, ensuring the downloaded tools remain available across sessions.
[REMOTE_CODE_EXECUTION]: The instructions direct the agent to download and install Node.js binaries and the @iqinghu/qhkit package at runtime if they are not detected in the environment.
[EXTERNAL_DOWNLOADS]: The skill fetches Node.js distribution files and SHA256 checksums from nodejs.org, and suggests using the registry.npmmirror.com mirror for package downloads.
[COMMAND_EXECUTION]: The skill makes extensive use of shell commands for system environment detection, package management (npm), and file operations (tar, mkdir, sha256sum).
[INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect injection as it processes untrusted data.
Ingestion points: User-provided image paths and text prompts are passed to the qhkit CLI in SKILL.md.
Boundary markers: No explicit delimiters or boundary markers are used to separate user input from the command structure.
Capability inventory: The skill can execute shell commands, perform network operations via npm and curl, and write to the local filesystem (found in SKILL.md).
Sanitization: There is no evidence of sanitization or validation of the input strings before they are interpolated into the shell command.

linkpix-white-background