The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: Fetches release information and changelog data from Palantir's official GitHub repository (api.github.com/repos/palantir/foundry-platform-python/releases). This is a legitimate operation to check for breaking changes before upgrading.
[EXTERNAL_DOWNLOADS]: Performs installations and upgrades of the official foundry-platform-sdk package from the Python Package Index (PyPI) and checks for @osdk/client via NPM.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data in the form of release notes from the GitHub API, which represents a potential attack surface if an attacker could compromise the repository's release metadata.
- Ingestion points: Release 'body' content fetched via urllib.request in the Step 2 Python snippet (found in SKILL.md).
- Boundary markers: None present; the content is printed directly to the console.
- Capability inventory: The skill utilizes Bash, Write, and Edit tools to perform upgrades and file modifications.
- Sanitization: The script truncates the release body to the first 200 characters, which limits the volume of data processed but does not strip potentially malicious instructions.

palantir-upgrade-migration