The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill documents procedures for installing the astropy library and its optional dependencies using uv pip. It also describes legitimate library functions for downloading remote files (astropy.utils.data.download_file) and accessing data from cloud storage or remote servers (e.g., S3, HTTP) for astronomical research purposes.
[COMMAND_EXECUTION]: Includes instructions for the agent to execute shell commands to manage Python environments and install necessary library packages.
[SAFE]: All external links and repository references (such as astropy.org and github.com/astropy) point to the official resources of a well-known, established open-source project.
[DATA_EXFILTRATION]: The skill includes an indirect prompt injection attack surface by processing data from untrusted external sources.
Ingestion points: Functions like fits.open(), Table.read(), SkyCoord.from_name(), and download_file() (referenced in references/fits.md, references/tables.md, and references/wcs_and_other_modules.md) ingest data from potentially untrusted files or remote databases.
Boundary markers: The instructions do not specify boundary markers or warnings to ignore embedded instructions in the processed astronomical data.
Capability inventory: The skill has capabilities for file system access (read/write FITS and tables) and network access for data retrieval.
Sanitization: There is no mention of sanitization or validation of metadata or table content retrieved from external files before processing.

astropy