The Agent Skills Directory

[DYNAMIC_EXECUTION]: The skill performs dynamic code generation in several places. scripts/living-deliverable.ts generates a Cloudflare Worker script (worker.ts) and a wrangler.jsonc configuration file at runtime to create preview environments. Similarly, scripts/docker-audit.ts can scaffold Dockerfiles for various runtimes (Node.js, Next.js, Bun).
[COMMAND_EXECUTION]: The scripts/tunnel.ts script spawns the cloudflared binary to establish network tunnels for local development and client previews. It also executes system clipboard utilities like pbcopy, xclip, or wl-copy to facilitate sharing tunnel URLs.
[INDIRECT_PROMPT_INJECTION]: The skill has a significant attack surface for indirect prompt injection as it is designed to ingest and analyze external, potentially untrusted data. This includes Dockerfiles provided for auditing in scripts/docker-audit.ts, CI/CD pipeline logs or errors in references/cicd.md, and web responses that are intercepted and modified in the dynamically generated living deliverable worker.
Ingestion points: Dockerfiles processed by scripts/docker-audit.ts, Upstream web responses in scripts/living-deliverable.ts, and CI/CD logs analyzed in references/cicd.md.
Boundary markers: Largely absent in the script logic, though the system uses a mode-based isolation to restrict the scope of each run.
Capability inventory: The skill has access to powerful tools including run_command, bash, and write_to_file across its operational scripts.
Sanitization: Basic sanitization is present, such as sanitizing project slugs to prevent directory traversal in scripts/living-deliverable.ts and basic URL validation in scripts/tunnel.ts.
[EXTERNAL_DOWNLOADS]: Several reference files (e.g., references/cicd.md, references/security.md) cite external GitHub repositories and projects for design patterns, templates, and security guidelines. These sources include humanlayer/skills, addyosmani/agent-skills, and wshobson/agents, which are used to inform the scaffolding of CI/CD pipelines and agentic loops.

devops