The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The skill attempts to resolve credentials for the TestRail API from a local file at ~/.folio-credentials and a .env file. These paths are used for authenticating with the service required for the skill's primary functionality. Given the author context (folio-org), the use of a vendor-specific credential file is a standard practice for CLI-style integrations.
[INDIRECT_PROMPT_INJECTION]: The skill processes test case data retrieved from the external TestRail API, which could potentially contain malicious instructions embedded in case fields.
Ingestion points: Case fields such as title, custom_preconds, and custom_steps_separated are fetched via the TestRail get_cases API (Step 5 and 6).
Boundary markers: The skill enforces a mandatory, non-optional preview step (Step 8) that requires explicit user confirmation before any mutation operations are performed.
Capability inventory: The skill can perform network POST requests to the TestRail API and write local log files describing the changes made.
Sanitization: Step 10 includes a sanitization routine for non-breaking spaces and control characters that might be introduced during the automated replacement process.

test-case-updater