The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/idf_builder.py invokes the ESP-IDF build system via subprocess.run. It follows best practices by passing arguments as a list and validating the target chip against a known list, which prevents shell command injection.
[DYNAMIC_EXECUTION]: The Python script uses sys.path.insert to include a local libs directory. This allows it to load shared helper modules (idf_env, profile_store) located within the skill's package structure.
[INDIRECT_PROMPT_INJECTION]: The skill parses sdkconfig to extract the CONFIG_IDF_TARGET. While this involves reading external data, the extracted value is used strictly for project configuration and metadata reporting, posing minimal risk.

build-idf