The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill describes an agent that processes untrusted data from local files and web searches, acknowledging the risk of indirect prompt injection in its security documentation.
Ingestion points: The agent reads local files using 'read' and 'grep' tools as described in 'references/usage.md' and fetches web content through the 'pi-web-access' package in 'references/pi-web-access.md'.
Boundary markers: Message serialization using prefixes like '[User]:' and '[Assistant]:' is detailed in 'references/session-format.md'.
Capability inventory: The agent supports shell execution ('bash'), file modifications ('write', 'edit'), and package management ('pi install') as noted in 'references/usage.md'.
Sanitization: 'references/pi-mcp-adapter.md' documents an 'outputGuard' feature that truncates large outputs and redirects them to temporary files to prevent context overflow.
[EXTERNAL_DOWNLOADS]: The documentation provides instructions for installing the Pi agent and its extensions from the official project domain and standard package registries.
Evidence: 'references/overview.md' mentions an installation script hosted at 'https://pi.dev/install.sh'.
Evidence: 'references/packages.md' and 'SKILL.md' describe installing the '@earendil-works/pi-coding-agent' and related extensions from npm and GitHub.
[COMMAND_EXECUTION]: Shell command execution is a core feature of the Pi harness, allowing users and the agent to run development tools and scripts.
Evidence: 'SKILL.md' and 'references/usage.md' outline the usage of the 'bash' tool and the '!command' syntax for executing shell commands directly within the agent session.
[DYNAMIC_EXECUTION]: The skill documents support for executing JavaScript-based workflows and dynamic extension loading as part of the agent's modular architecture.
Evidence: 'references/pi-subagents.md' describes how the 'pi-subagents' package executes JavaScript workflow scripts in a sandboxed environment.
Evidence: 'references/extensions.md' explains the process for dynamic tool registration and event handler execution at runtime.

pi-agent