The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: Fetches an installation script from the vendor's repository on GitHub to set up the required CLI environment.
[REMOTE_CODE_EXECUTION]: Executes a setup script from the vendor's official GitHub organization to install the higgsfield CLI tool.
[COMMAND_EXECUTION]: Utilizes the Bash tool to run the higgsfield product-photoshoot command for image generation tasks.
[INDIRECT_PROMPT_INJECTION]: The skill processes user-provided descriptions and images as arguments for a CLI command, which introduces a potential surface for indirect instructions.
Ingestion points: User intent and image files are ingested via the --prompt and --image flags in the command execution instructions in SKILL.md.
Boundary markers: The CLI command uses double quotes for the prompt argument, but explicit shell-escaping instructions for the agent are absent.
Capability inventory: The skill has the capability to execute shell commands via the Bash tool as defined in the allowed-tools section.
Sanitization: The skill instructions mitigate risk by stating that the backend service assembles the final prompt, preventing the agent from directly interpreting user input as image generation instructions.

higgsfield-product-photoshoot