The Agent Skills Directory

[SAFE]: Comprehensive security analysis of the skill's instructions, examples, and scripts revealed no malicious intent, obfuscation, or unauthorized data access.- [COMMAND_EXECUTION]: A test script (scripts/test_alloy_xml_slice.py) uses subprocess.run to execute a bundled Python utility for regression testing. This usage is benign and limited to internal skill maintenance.- [PROMPT_INJECTION]: The skill's workflow involves reading and analyzing user-supplied Alloy models and XML data. While this presents an indirect prompt injection surface, the risk is mitigated by explicit instructions for the agent to provide evidence-based explanations rather than blindly executing contents.- [DATA_EXFILTRATION]: The alloy_xml_slice.py script parses local XML instances for model analysis. The script does not possess network capabilities and implements a 32MB file size threshold to prevent potential denial-of-service through resource exhaustion.

alloy6