The Agent Skills Directory

Command Execution Surface: The skill instructs the agent to perform various shell-based tasks using tools like dotnet, gradlew, curl, and sed. These commands are standard for project scaffolding, dependency management, and building Android artifacts.
Indirect Prompt Injection Considerations: The skill accepts user-provided parameters such as libraryName and bindingProjectName, which are subsequently interpolated into shell commands. This creates a potential surface where malformed or adversarial input could influence command behavior if not properly sanitized.
Ingestion points: Parameters like libraryName, bindingProjectName, and mavenCoordinates defined in SKILL.md.
Boundary markers: Not explicitly present in the instructional templates.
Capability inventory: Use of gradlew (subprocess execution), dotnet CLI (subprocess execution), and file-writing capabilities to generate project files.
Sanitization: The provided instructions do not explicitly describe sanitization or validation steps for these inputs before they are used in a shell context.
External Resource Integration: The skill workflow involves downloading external components, including the Gradle build tool from official distribution sites and a project template from a community-maintained GitHub repository. While these are common practices for setting up development environments, they represent an integration of external code into the local project structure.

android-slim-bindings