The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill provides instructions to download and install Node.js from the official distribution site (nodejs.org) and its official mirrors. The installation process correctly includes a checksum verification step using sha256sum to ensure file integrity before extraction. As these sources are well-known services, this is documented as standard environment setup.
[PERSISTENCE]: Instructions in the skill suggest appending the Node.js installation path to the shell profile (e.g., ~/.bashrc) to maintain access across sessions. While this involves modifying persistence configuration files, it is a routine step for manual software installation and path configuration.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process outputs from the qhkit CLI tool, such as error messages and status updates, which are then presented to the user. This creates a potential surface where external tool data enters the agent's context.
Ingestion points: Command-line output from qhkit workflow status and qhkit workflow estimate described in SKILL.md.
Boundary markers: None explicitly defined in the instructions.
Capability inventory: Execution of subprocesses via the qhkit command.
Sanitization: No specific sanitization or filtering of the tool's stdout/stderr is required before the agent relays the message.

qinghu-image-deai-hd