The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses subprocess.run in several scripts for legitimate operational tasks:
scripts/scaffold.py executes the project's validator via sys.executable to ensure the generated bundle is valid by construction.
tests/test_okf_wiki.py runs various CLI scripts (scaffold.py, validate.py, and hooks) to perform integration testing.
scripts/gh-wiki-bootstrap.py invokes the playwright CLI to manage browser automation.
[EXTERNAL_DOWNLOADS]: The skill's documentation and scripts reference external dependencies and tools:
README.md and example/README.md instruct the user to install PyYAML and playwright via pip.
scripts/gh-wiki-bootstrap.py utilizes the Playwright library to automate interactions with GitHub's web interface.
scripts/scaffold.py and scripts/validate.py include logic to verify the presence of PyYAML before execution.
[DATA_EXFILTRATION]: scripts/gh-wiki-bootstrap.py accesses a sensitive local file containing GitHub session credentials:
The script reads a Playwright storageState JSON file (defaulting to ~/.cache/gh_state.json).
This file contains raw browser cookies and authentication state, which are used to bypass the lack of a REST API for GitHub Wikis.
This access is documented as necessary for the script's primary function of bootstrapping the first page of a GitHub Wiki.
[PROMPT_INJECTION]: The skill implements an 'Indirect Prompt Injection' surface through its orientation hooks:
Ingestion points: okf-anchor.py (SessionStart hook) reads the content of bundle/index.md (or the root index.md) and prints it to stdout for context injection.
Boundary markers: The hook wraps the injected content with explicit markers: --- begin OKF index --- and --- end OKF index ---.
Capability inventory: The skill provides capabilities for shell command execution (scaffold.py), file writing (scaffold.py), and browser automation (gh-wiki-bootstrap.py).
Sanitization: The hook strips YAML frontmatter from the index file but does not perform additional sanitization of the markdown body, relying on the agent's internal safety filters for untrusted data processed at session start.

okf-wiki