The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes manuscript documents and external source files (PDFs, Markdown, etc.). Malicious instructions embedded in these processed materials could potentially influence agent behavior during drafting or review tasks.
Ingestion points: Manuscript files and source documents identified in the project workspace or provided via source_paths.
Boundary markers: The framework uses Project Profiles and receipts to bound logical operations, though it does not explicitly use "ignore embedded instructions" delimiters when interpolating text content into prompts.
Capability inventory: The agent can execute shell commands (subprocess.run), perform network requests (urllib.request), and write files to the project directory.
Sanitization: No explicit sanitization or filtering of external document content is implemented before processing.
[COMMAND_EXECUTION]: Several utility scripts use subprocess.run to interact with the local environment for version control and tool discovery.
Version Control: Interacts with the Jujutsu (jj) version control system to manage project bookmarks and check repository state in scripts/next_version.py and scripts/validate_state.py.
Tool Discovery: Probes for local format tools such as Pandoc, LibreOffice, and PDF/EPUB validators by calling them with the --version flag in scripts/probe_capabilities.py.
[EXTERNAL_DOWNLOADS]: The scripts/check_dependencies.py script includes a feature to verify dependency integrity by fetching archives from an external GitHub repository.
Pattern: Downloads tarball archives from https://codeload.github.com/LightDevCoder/skills to compare local bytes against a remote published reference.
Method: Uses urllib.request.urlopen with a custom User-Agent to retrieve the remote content.
[DYNAMIC_EXECUTION]: The scripts/probe_capabilities.py script performs dynamic loading of Python modules to check for available capabilities.
Implementation: Uses importlib.import_module(name) where the module name is derived from a hardcoded list of supported libraries, such as playwright, docx, and pypdf.

manuscript-ops