The Agent Skills Directory

[SAFE]: The skill provides comprehensive guidance for the Zoho Catalyst platform. All external resources, including CLI tools (zcatalyst-cli), SDKs (zcatalyst-sdk-node), and GitHub repositories (github.com/catalystbyzoho/agent-skills.git), are official vendor assets owned by 'catalystbyzoho'.
[INDIRECT_PROMPT_INJECTION]: The skill instructions involve reading local project configuration files (.catalystrc and catalyst.json) to identify project context. While this is an ingestion point for external data, the skill correctly advises using the official Catalyst CLI with the non-interactive (-ni) flag to process this information, minimizing the risk of arbitrary instruction execution from the configuration files.
[EXTERNAL_DOWNLOADS]: The documentation mentions installing the Catalyst CLI via NPM and cloning skill repositories from GitHub. These are standard installation procedures for the platform and target trusted vendor-owned repositories.

catalyst-basics