The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands to synchronize the local development environment. Specifically, it uses git fetch, git checkout, and git pull to update the Dify codebase from its remote repository. Additionally, the skill suggests using python -m json.tool for JSON validation.
[INDIRECT_PROMPT_INJECTION]: The skill processes external, untrusted data from both the Dify codebase and existing OpenAPI specification files, creating an attack surface where instructions embedded in those files could influence the agent's behavior.
Ingestion points: OpenAPI JSON files located in en/api-reference/ and Python controller/service files within the api/ directory of the Dify codebase.
Boundary markers: No explicit delimiters or instructions are provided to the agent to distinguish between documentation data and potential instructions embedded in the code comments or spec descriptions.
Capability inventory: The agent has the capability to read local files, execute shell commands (git), and generate/modify documentation content.
Sanitization: The instructions do not define any sanitization, filtering, or validation logic for the content ingested from the codebase or specs.
[EXTERNAL_DOWNLOADS]: The skill performs synchronization with the Dify project's official repository on GitHub using git pull. This fetches updates for the documentation and codebase from the project's remote origin.

dify-docs-api-reference