The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The file references/craft-command-evidence.json specifies a direct download URL for a portable CAD CLI executable hosted on GitHub (https://github.com/storytold/cadcraft/releases/download/v0.7.0/cadcraft-0.7.0-windows-x64-portable.zip).
[REMOTE_CODE_EXECUTION]: The skill requires the execution of the cadcraft-cli.exe binary, which is retrieved from an external third-party source. Additionally, the skill suggests the use of an installation command (npx skills add) that fetches code from a remote repository.
[COMMAND_EXECUTION]: The skill is designed to perform CAD operations by executing shell commands (e.g., cadcraft-cli run) and MCP tool calls (execute), including potentially destructive or data-altering operations like save and execute command strings.
[INDIRECT_PROMPT_INJECTION]:
Ingestion points: The skill processes and compares external .dxf drawing files as primary inputs in SKILL.md and references/craft-methods.md.
Boundary markers: There are no documented boundary markers or instructions to disregard potential malicious directives embedded within the drawing metadata or structure.
Capability inventory: The skill possesses capabilities for file system access, command execution, and external tool invocation.
Sanitization: No validation or sanitization mechanisms for the ingested CAD file contents are described in the provided files.

cadcraft-compare-revisions