The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/catalog-session.py uses subprocess.Popen to launch marimo notebook servers. These servers are started with the --no-token flag, which disables all authentication. The SKILL.md instructions explicitly guide the agent to bind these unauthenticated servers to all network interfaces (0.0.0.0) in specific environments, potentially allowing anyone on the network to access the kernel and execute arbitrary code as the local user.
[DYNAMIC_EXECUTION]: The execute_code function in scripts/catalog-session.py programmatically executes Python code by posting to the unauthenticated marimo kernel API. This is used for session monitoring and running all notebook cells, representing a direct mechanism for executing arbitrary code within the notebook context.
[COMMAND_EXECUTION]: The skill uses subprocess.run and subprocess.Popen to manage process lifecycles and run external tools such as ps for process verification and uvx for executing marimo and ruff. The scripts/validate-notebook.sh script also executes several validation and formatting commands via uvx.
[INDIRECT_PROMPT_INJECTION]: The skill processes configuration from catalog.toml and executes code from various notebook files (.py), which may originate from untrusted sources in a repository.
Ingestion points: Resolves and reads catalog.toml to find notebook paths and auth requirements; reads and executes Python code from notebook files in the repository.
Boundary markers: The skill does not use explicit boundary markers or security warnings when interpolating or processing the content of these files.
Capability inventory: The skill has extensive capabilities, including file system access (read/write), command execution via subprocess, and the ability to host and interact with network-accessible notebook kernels.
Sanitization: There is no evidence of code sanitization or safety validation performed on the notebook content before it is executed via the session helper or validation script.

vignette-catalog-compose-notebook