The Agent Skills Directory

[COMMAND_EXECUTION]: The example script examples/03-production-ready/check_cluster_health_enhanced.py uses subprocess.run to execute commands on remote nodes via SSH. The implementation follows security best practices by using the list format for arguments to prevent shell injection and validating hostnames with a strict regular expression before use.
[EXTERNAL_DOWNLOADS]: The tools/convert_to_uv.py utility fetches package metadata from the official PyPI JSON API (pypi.org) to resolve version constraints during script conversion. The documentation also references the official astral-sh/setup-uv GitHub Action for CI/CD workflows. These references target well-known and trusted services.
[INDIRECT_PROMPT_INJECTION]: The skill includes tools (convert_to_uv.py, validate_script.py) that process user-provided Python scripts. These tools utilize Python's ast (Abstract Syntax Tree) module for static analysis and regular expressions for metadata extraction, which avoids the risks associated with dynamic execution of untrusted input.
[SAFE]: The skill extensively documents and demonstrates security best practices, including using Infisical or system keyrings for secret management, implementing timeouts on network and subprocess calls, and avoiding hardcoded credentials.

python-uv-scripts