The Agent Skills Directory

Input Validation and Path Safety: The scaffold.py script implements strict validation for user-provided recipe names using regular expressions to ensure they follow a specific format. It also includes defensive checks to prevent path traversal, verifying that both the recipe name and the output directory do not contain traversal segments (like ..), ensuring files are written only to intended locations.
Controlled Subprocess Execution: The integration tests utilize subprocess.Popen to manage a local FastAPI server for end-to-end testing. This is implemented using static command lists rather than shell strings, which is a recommended practice to prevent command injection vulnerabilities.
Standard Dependency Resolution: The project templates configure uv as a package manager and specify official registries for dependency resolution. The core dependencies, such as the google-adk library, are provided by the vendor and are appropriate for the skill's intended functionality.
Observability and Configuration: The skill scaffolds boilerplate for environment configuration and telemetry. These components use standard patterns for managing sensitive information via placeholders in .env.example and reporting metrics to authorized cloud environments, which are common practices for development workflows.

scaffold-python-recipe