The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs the user to download the butler CLI tool from itch.io's official distribution services, specifically itchio.itch.io/butler and broth.itch.zone. These are recognized as legitimate domains for the service.
[COMMAND_EXECUTION]: The skill uses several shell commands to manage game publishing, including butler push for uploads, curl for downloading the tool, and chmod +x to ensure the binary is executable. These are standard operations for this tool's primary purpose.
[INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it processes external data (game build folders and version files) and possesses network capabilities.
Ingestion points: Build directories (e.g., ./build/windows) and version files (e.g., build.txt) specified in the butler push commands within SKILL.md.
Boundary markers: No explicit boundary markers are used to separate the build data from the agent's instructions.
Capability inventory: The skill can execute shell commands and perform network uploads (via butler).
Sanitization: There is no mention of sanitizing or validating the contents of the build folder or the strings provided in version files.

itch-publish