The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The references/installation.md file contains instructions for macOS users to link the bundled CLI tool using sudo. Specifically, it suggests executing sudo ln -sf to create symbolic links in /usr/local/bin, which involves system-level modifications requiring administrative privileges.\n- [COMMAND_EXECUTION]: The skill relies on the diffusion (alias dapi) command-line interface, instructing the agent to execute various subcommands such as grab, open, and window show. The installation reference also provides several shell and PowerShell commands for environment setup, package management (brew, winget), and repository management (git).\n- [INDIRECT_PROMPT_INJECTION]: The skill instructions in SKILL.md direct the agent to read guidance and documentation from local application resource directories (Diffusion Studio.app/Contents/Resources/docs or %LOCALAPPDATA%\DiffusionStudio\app-<version>\resources\docs) and to "trust it over memory."\n
Ingestion points: Documentation files located at skills/editor.md within the application bundle's resource folder, accessed during the session.\n
Boundary markers: None identified; there are no instructions to ignore or validate potentially malicious content within these files.\n
Capability inventory: The agent can execute commands via the diffusion CLI and interact with the local file system to process media files.\n
Sanitization: No evidence of content sanitization or validation of the documentation files before processing.\n- [EXTERNAL_DOWNLOADS]: The installation guide provides methods for downloading software from external sources, including the author's GitHub repository (github.com/diffusionstudio/editor.git), a Homebrew cask (diffusionstudio/tap/editor), and the Microsoft Store via winget. These resources are provided for tool installation and source code access and originate from the skill's author.

editor