The Agent Skills Directory

[COMMAND_EXECUTION]: The scripts/idf_flasher.py script executes system commands via subprocess.run to call idf.py and powershell. Although it uses list-based arguments to prevent simple shell injection, it invokes external binaries based on environment paths.\n- [PRIVILEGE_ESCALATION]: Documentation in SKILL.md and logging in scripts/idf_flasher.py recommend the user execute sudo usermod -aG dialout $USER. This command modifies system-wide group memberships to grant persistent hardware access, which requires administrative privileges.\n- [DYNAMIC_EXECUTION]: The Python script scripts/idf_flasher.py dynamically modifies sys.path at runtime to include local shared directories, allowing it to load modules from computed paths.\n- [INDIRECT_PROMPT_INJECTION]: The skill reads and parses local build configuration files (sdkconfig, flasher_args.json). While necessary for operation, this creates a surface where a compromised project workspace could provide unexpected input to the flashing script.\n
Ingestion points: sdkconfig, flasher_args.json (in scripts/idf_flasher.py)\n
Boundary markers: Absent\n
Capability inventory: Subprocess execution of idf.py, file system access, and project profile updates\n
Sanitization: Script uses list-based arguments for subprocess calls, mitigating basic command injection.

flash-idf