The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/package_macos_app.py uses subprocess.run to execute the lipo (or llvm-lipo) tool for creating universal macOS binaries. This is a standard operation for application packaging.
[EXTERNAL_DOWNLOADS]: The skill instructions and scaffolding scripts reference and download well-known, community-trusted Go packages, primarily the Ebitengine engine (github.com/hajimehoshi/ebiten/v2) and related utilities like github.com/coder/websocket. The provided CI workflow also installs standard system libraries required for graphical testing on Linux.
[INDIRECT_PROMPT_INJECTION]: The skill has an inherent attack surface for indirect prompt injection as it is designed to ingest and analyze untrusted project data, such as game source code and local instructions.
Ingestion points: SKILL.md instructs the agent to read external repository instructions, go.mod, and source files. The scripts/check_ebitengine.py utility reads and parses Go source files.
Boundary markers: No explicit delimiters or 'ignore embedded instructions' warnings are implemented when reading external project files.
Capability inventory: The skill utilizes go build, go test, and custom scripts that execute shell commands via subprocess for packaging.
Sanitization: The scripts/new_game.py script uses json.dumps to sanitize user-provided strings like the game title before they are interpolated into Go source templates.
[PRIVILEGE_ESCALATION]: The bundled GitHub Actions workflow (assets/ci/github-actions.yml) uses sudo apt-get install to provision the CI runner with necessary system dependencies (Xvfb, Mesa, ALSA) for headless graphical testing, which is standard practice in such environments.

ebitengine-game