The Agent Skills Directory

[SAFE]: The skill provides structured guidance and templates for developing serverless functions within the Zoho Catalyst ecosystem. All operations are consistent with the stated purpose of cloud application development.
[COMMAND_EXECUTION]: The skill references standard CLI commands such as catalyst init, catalyst deploy, and catalyst apig:enable. It correctly advises the agent to avoid running interactive commands (like catalyst init) that require user input in the terminal, directing the user to perform these actions instead.
[EXTERNAL_DOWNLOADS]: The skill refers to official vendor packages including the zcatalyst-cli and zcatalyst-sdk-node library. It also includes the busboy package for handling multipart form-data, which is a standard industry library for Node.js file uploads.
[PROMPT_INJECTION]: The skill contains instructional controls (e.g., "HARD STOP if not connected") to ensure project context is established before the agent generates code. These are legitimate behavioral constraints for ensuring the agent uses the correct project environment and are not attempts to bypass safety filters.
[DATA_EXFILTRATION]: While the skill templates handle incoming HTTP request data (req.body, req.query), this is inherent to the function of a serverless handler. The skill provides security advice, such as requiring authentication for sensitive functions and using the Catalyst API Gateway for authorized domain enforcement.

catalyst-functions