The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes PowerShell scripts and the dotnet CLI to build user projects, launch executables, and manage UI automation for visual testing. These actions are performed using the provided build-run-capture.ps1 and measure-render.ps1 scripts.
[DYNAMIC_EXECUTION]: The skill employs dynamic code generation and execution as a fallback mechanism for theme resource discovery. It writes and executes a temporary C# console application to extract BAML resources from local DevExpress DLLs when source code is not installed. Additionally, it uses Add-Type in PowerShell to define P/Invoke signatures for interacting with Windows UI APIs for window capture and measurement.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-controlled data from local project files (XAML, C#, project configurations) to identify customization targets and themes. This represents a vulnerability surface where malicious code within a processed file could attempt to influence the agent's logic during the customization process.
Ingestion points: Local project files such as .csproj, .xaml, and source code files are read and parsed in SKILL.md and find-resource.md.
Boundary markers: The skill uses focused extraction techniques like grep and range-based file reading to isolate specific resource blocks rather than interpreting the entire file content as instructions.
Capability inventory: The agent has capabilities for file system modifications, project builds, and local process execution as part of its primary workflow.
Sanitization: The skill focuses on structural validation (e.g., verifying PART_ names and XML namespaces) and pixel-based visual measurement rather than directly executing logic parsed from the ingested project data.

devexpress-wpf-theme-customizer