The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill documents a security feature of the Catalyst AppSail gateway where admin-scope credentials are automatically injected into incoming requests. It provides clear guidance on how to implement authentication guards using getCurrentUser() to prevent unauthorized access by anonymous users who would otherwise inherit admin privileges by default.\n- [DATA_EXPOSURE]: The documentation includes a critical warning regarding the build_path configuration in app-config.json. It explicitly advises against setting this path to the filesystem root (/), as doing so would cause the deployment tool to attempt to zip and upload the entire disk, potentially exposing sensitive system files and leading to access errors.\n- [COMMAND_EXECUTION]: The skill provides standard, well-documented CLI commands for the zcatalyst-cli tool to manage deployments and environment configurations. These commands are necessary for the skill's primary purpose of application hosting.\n- [EXTERNAL_DOWNLOADS]: The skill references the installation and use of the official zcatalyst-cli tool from the NPM registry and the use of the zcatalyst-sdk-node library. Both are official components of the Zoho Catalyst ecosystem.

catalyst-appsail