The Agent Skills Directory

[SAFE]: The skill provides purely instructional documentation and technical references for developers following established EspoCRM architectural patterns.\n- [COMMAND_EXECUTION]: The documentation includes instructions for standard maintenance and development commands such as application cache rebuilding via bin/command rebuild and dependency management using composer and npm.\n- [EXTERNAL_DOWNLOADS]: Technical examples provide code for interacting with external services through REST APIs using PHP's curl library, featuring security best practices like authorization headers and response validation.\n- [PROMPT_INJECTION]: (Category 8) The skill describes workflows for handling untrusted data from external sources such as webhooks, API calls, and file uploads.\n
Ingestion points: Included in documentation for API action classes (references/api-actions.md), webhook controllers (references/common-tasks.md), and file attachment handling (references/api-actions.md).\n
Boundary markers: Examples emphasize the use of HMAC signature verification for webhooks and application-wide Access Control List (ACL) checks for all entity operations.\n
Capability inventory: The guide describes using the framework's EntityManager for database access, FileStorageManager for file system writes, and curl for network communications.\n
Sanitization: Code samples demonstrate sanitization through filter_var for input validation and htmlspecialchars for safe output rendering in templates.

espocrm-development