The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external web pages via the extract_sac_deploy_info.py script.
Ingestion points: The extract_sac_deploy_info.py script uses Playwright to browse a user-provided or default Huawei Cloud solution URL and extract text, prices, and links into a JSON structure.
Boundary markers: The extracted data is returned as a structured JSON object, but the text content within fields like title and estimated_price_text is not explicitly sanitized or delimited for embedded instructions when displayed to the agent.
Capability inventory: The skill has the capability to execute shell commands (terraform, playwright-cli) and perform file operations in the temporary directory.
Sanitization: While the script uses regular expressions to filter for specific data types (prices, URLs), the raw text extracted from the page is interpolated into the agent's context.
[COMMAND_EXECUTION]: The skill executes various CLI tools including terraform and playwright-cli to manage cloud infrastructure.
Evidence: scripts/playwright_utils.py uses subprocess.run to invoke the Playwright CLI for web scraping. The main workflow in SKILL.md orchestrates the deployment via terraform init, plan, apply, and destroy.
[EXTERNAL_DOWNLOADS]: The skill downloads infrastructure templates and binaries from external sources.
Evidence: SKILL.md uses curl to fetch a Terraform template (dify-ecs.tf) from a Huawei Cloud OBS bucket (documentation-samples.obs.cn-north-4.myhuaweicloud.com).
Evidence: references/cli-installation-guide.md provides links to download the Terraform binary from HashiCorp's official release site (releases.hashicorp.com).
[DYNAMIC_EXECUTION]: The skill generates and executes JavaScript code at runtime to facilitate web scraping tasks.
Evidence: scripts/playwright_utils.py contains a run_pw_code function that writes a JavaScript snippet from a template to a temporary file and executes it using the playwright-cli run-code command.

huawei-cloud-sac-dify