The Agent Skills Directory

[COMMAND_EXECUTION]: The scripts/fetch_docs.py script uses subprocess.check_call to programmatically execute pip install for the httpx library if it is not found in the environment. Furthermore, scripts/component_search.py uses subprocess.run to orchestrate execution of other Python scripts within the skill.
[EXTERNAL_DOWNLOADS]: The scripts/fetch_docs.py utility fetches documentation updates from https://www.dash-mantine-components.com/assets/llms.txt. While this targets the official site of the library, it represents a runtime network dependency and external data ingestion.
[INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection by ingesting and displaying remote documentation content to the agent.
Ingestion points: scripts/fetch_docs.py retrieves content from a remote URL.
Boundary markers: The search results are delimited with markdown headers (##) and separators (---), though there are no explicit instructions for the agent to ignore embedded commands within the fetched text.
Capability inventory: The skill provides scripts for package installation (pip) and file creation (scaffold_app.py).
Sanitization: The script performs no sanitization or filtering of the fetched remote documentation content.
[DYNAMIC_EXECUTION]: Several files, including assets/app_single_page.py and assets/app_multi_page.py, implement clientside_callback logic. This is a core Dash feature that executes provided JavaScript strings directly in the user's browser, which is a standard but noteworthy dynamic execution vector.

dmc-py