The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The scripts/sync_upstream.py maintenance script is designed to synchronize local snapshots with the official nyblnet/bento repository on GitHub. It fetches release metadata and assets, strictly verifying their integrity against SHA-256 hashes recorded in upstream.lock.json before performing an atomic replacement.
[EXTERNAL_DOWNLOADS]: Instructional content in references/upstream/bento-official-skill.md provides commands for the agent to download the latest project shell from bento.page if a local template is not already present.
[COMMAND_EXECUTION]: The scripts/bento_deck.py tool and associated evaluation scripts (evals/output/run_fixture.py, evals/upstream/run_fixture.py) utilize subprocess.run to execute internal validation and build logic. These operations are scoped to the skill's local environment and are used to ensure document structure and identity preservation.
[DATA_EXFILTRATION]: No unauthorized network activity or credential harvesting patterns were detected. Network operations are limited to well-known technological services (GitHub) for legitimate maintenance purposes as described in the skill documentation.
[PROMPT_INJECTION]: The skill implements a 'Proposal-First' workflow, requiring the agent to generate a plan for user approval before producing final artifacts. This structure enforces a layer of human-in-the-loop verification, mitigating the risk of unintended behavior.

qiaomu-bento-ppt