The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/lib/providers.mjs utilizes child_process.spawn to execute the vendor's dlazy CLI tool, which serves as the primary interface for triggering image generation and model-specific tasks.\n- [EXTERNAL_DOWNLOADS]: The skill performs network requests using fetch in scripts/gen.mjs and scripts/lib/providers.mjs to download reference images from remote URLs and retrieve processed assets from AI provider APIs.\n- [DATA_EXFILTRATION]: The skill transmits local image files and prompt text to external AI service providers (including OpenAI, Google, and Replicate) and the vendor's API infrastructure (api.dlazy.com) as part of its documented generative workflow.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted product descriptions and images provided by users, which are interpolated directly into prompts for image generation models. Evidence chain: 1. Ingestion points: skill.md prompt templates and scripts/gen.mjs task arguments; 2. Boundary markers: None (though layout delimiters are suggested for aesthetics); 3. Capability inventory: scripts/lib/providers.mjs (spawn) and scripts/gen.mjs (network and file write access); 4. Sanitization: None.

item-detail