The Agent Skills Directory

[COMMAND_EXECUTION]: The scripts/install_all.py script uses subprocess.run to execute the npx command for installing ecosystem member skills. This behavior is localized to dependency management and requires an explicit flag to execute.
[EXTERNAL_DOWNLOADS]: The skill facilitates the download of additional member skills from the author's GitHub repository (fatih-developer/fth-skills). This is a documented functional requirement for the ecosystem's operation.
[INDIRECT_PROMPT_INJECTION]: The skill uses a structured handoff mechanism (references/handoff-contract.md) to pass data between agent skills in a workflow.
Ingestion points: Member skills ingest JSON artifacts produced by previous steps, typically stored in the docs/ directory.
Boundary markers: The handoff contract explicitly instructs receiving skills to treat incoming data as input to verify rather than absolute truth, especially before performing destructive actions.
Capability inventory: The orchestrator skill has the capability to execute the installation script and manage file-based artifacts.
Sanitization: The contract provides clear guidance to exclude secrets, tokens, or personal data from shared artifacts, referencing their locations instead.

ecosystem-web