The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/openocd_flasher.py uses subprocess.run to interact with the openocd binary for firmware flashing, hardware reset, and probe detection. The implementation correctly passes arguments as a list rather than a shell string, preventing standard command injection attacks.
[INDIRECT_PROMPT_INJECTION]: The skill includes functionality to scan the local workspace for configuration clues, such as reading .vscode/launch.json and searching for openocd*.cfg files. This is intended to automate the setup process for developers but constitutes an indirect ingestion surface for project-level data.
Ingestion points: The scan_openocd_configs function in scripts/openocd_flasher.py reads and parses .vscode/launch.json and directory structures.
Boundary markers: None present; the script trusts the structure of the local configuration files.
Capability inventory: The skill has the capability to execute the openocd binary with parameters derived from scanned files.
Sanitization: Paths and configuration strings extracted from the workspace are used strictly as command-line arguments in a list format, which avoids shell interpretation and limits the risk to providing incorrect tool configurations.

flash-openocd