The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill configuration and generated templates reference resources from well-known technology organizations and official registries.
Fetches GitHub Actions from official repositories including actions/checkout, actions/setup-python, and pypa/gh-action-pypi-publish.
Configures pre-commit hooks targeting established repositories such as astral-sh/ruff-pre-commit, psf/black, pycqa/isort, and pre-commit/pre-commit-hooks.
References official Python package repositories including PyPI and TestPyPI for publishing and installation.
[COMMAND_EXECUTION]: Includes a local Python script scripts/scaffold.py designed to automate the creation of project directories and files.
The script uses standard pathlib and os modules to write static file templates to the local filesystem.
Implementation follows standard scaffolding patterns without performing network operations or executing arbitrary remote code.
[INDIRECT_PROMPT_INJECTION]: As a template generation tool, the scaffold.py script possesses an attack surface for indirect injection by incorporating user-supplied data into generated code.
Ingestion points: User input is received via CLI arguments --name, --author, and --email in scripts/scaffold.py.
Boundary markers: The script uses standard string interpolation to place inputs into templates without specific injection delimiters.
Capability inventory: The script performs filesystem write operations (Path.write_text, Path.mkdir, Path.touch) based on these templates.
Sanitization: The script includes explicit validation for the --name parameter using a regular expression (r"^[a-z][a-z0-9\-]*$") to ensure it conforms to standard naming conventions.

python-pypi-package-builder