The Agent Skills Directory

Local Script Generation and Execution: The skill instructs the agent to generate and execute a Python helper script (workspace/helpers/merge_findings.py) to handle JSON data merging. While this is used for deterministic data processing, runtime code generation and execution are patterns that warrant architectural review.- Indirect Prompt Injection Surface: The skill ingests data from workspace/findings/ and learnings.jsonl. Since this data is processed to influence further actions (merging and deletion), it presents a surface for indirect prompt injection if the source data is attacker-controlled.- Automated File Operations: The skill performs automated file system modifications, including creating directories, moving files to a trash staging area, and writing transaction logs. These operations are scoped to the workspace and documented in a transaction log to ensure transparency.

mantis-dedupe