The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses internal orchestration to perform environment discovery. Scripts such as generate_bagisto_ui_ux.py and inspect_bagisto_test_surface.py invoke sibling Python scripts (e.g., inspect_theme_environment.py) using subprocess.run. These calls are restricted to the local Python interpreter (sys.executable) and use absolute paths within the skill directory, avoiding arbitrary shell execution or remote code invocation.
[DYNAMIC_EXECUTION]: scaffold_theme.py generates local PHP service providers and JSON baseline files. This execution is confined to creating theme boilerplate on the local file system. The skill incorporates strict rules requiring the agent to present these generated snippets for user review and manual integration, ensuring no automated modification of core application logic occurs without oversight.
[INDIRECT_PROMPT_INJECTION]: The skill processes user project files (PHP, JavaScript, and Blade templates) to validate theme structures. To mitigate risks from malicious project content, inspect_theme_environment.py implements a custom PhpArrayParser. This parser extracts data from PHP configuration arrays using static tokenization rather than evaluation, preventing the execution of arbitrary PHP code contained within the analyzed files.
[EXTERNAL_DOWNLOADS]: The skill references official Bagisto documentation and repository URLs for informational purposes. No scripts perform automated downloads or fetch runtime dependencies from the internet. All logic and knowledge data (e.g., bagisto-ui-ux.json) are bundled directly within the skill package.

bagisto-shop-advance-theme-development