The Agent Skills Directory

[PERSISTENCE]: The file references/onboarding.md provides explicit instructions to modify shell configuration files such as ~/.bashrc and ~/.zshrc to store environment variables permanently. While intended for API keys, this modification of system startup files is a persistence mechanism.
[DYNAMIC_EXECUTION]: Both scripts/etsy_category_search.py and scripts/onboarding.py use sys.path.insert to dynamically alter the Python module resolution path at runtime. This allows the execution of code from relative paths like ../../_shared, which is not included in the skill package.
[INDIRECT_PROMPT_INJECTION]: The skill processes category metadata retrieved from an external API, presenting an attack surface if the remote data source is manipulated.
Ingestion points: Etsy category data retrieved via urlopen in scripts/etsy_category_search.py.
Boundary markers: None implemented in the processing logic.
Capability inventory: Subprocess execution (via onboarding.py commands), network operations (API calls), and file system writes (caching and logs).
Sanitization: Uses standard json.loads but lacks explicit validation or escaping for terminal display or prompt interpolation.
[COMMAND_EXECUTION]: The skill workflows involve executing shell commands to configure environment variables (setx, export) and run scripts that take JSON-formatted user input directly into CLI arguments.

linkfox-etsy-category-search