The Agent Skills Directory

[SAFE]: The skill serves as an analytical tool for Odoo development workflows and does not contain any instructions that bypass safety filters, execute arbitrary commands, or exfiltrate data.
[DATA_EXPOSURE]: The instructions reference checking the $ODOO_SOURCE environment variable. This is a standard practice in Odoo development to locate framework source code and does not represent a credential exposure or unauthorized data access.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted data from the local environment, such as manifest files, documentation, and branch names. While this creates an injection surface, the skill's capabilities are limited to search and reasoning, with no high-risk tools (like file writing or network execution) available for exploitation.

odoo-idea-gates