The Agent Skills Directory

[COMMAND_EXECUTION]: The skill makes extensive use of the Bash tool to execute cawcut CLI commands for authentication (auth login), catalog discovery (app list), inspection (app describe), and execution (app run). It also manages task status and account credits through the CLI.
[EXTERNAL_DOWNLOADS]: The skill provides instructions for users to install the official @ubnt/cawcut package via NPM if the CLI is missing from the environment. It also automates upgrades of the vendor's CLI using the cawcut upgrade command when updates are available.
[DYNAMIC_EXECUTION]: The skill utilizes local system utilities, including macOS sips, cross-platform ffmpeg, and a Windows PowerShell script using the .NET System.Drawing library, to dynamically optimize and resize media files that fail the CLI's pre-flight validation checks.
[INDIRECT_PROMPT_INJECTION]: The skill presents an attack surface by ingesting application metadata (names, descriptions, and schemas) from the CawCut catalog and user-supplied values for app inputs. This is mitigated by the mandatory use of structured selection tools (AskUserQuestion and AskQuestion) for enumerable choices and clear disclosure of app metadata before execution. The skill relies on the CLI's internal validation for input integrity.

cawcut-app-run