The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The documentation and guides reference the installation of standard, well-known libraries such as fastapi, psycopg2-binary, express, pg, and jsonwebtoken using official package managers (pip, npm). These are standard dependencies for the application architecture described.
[INDIRECT_PROMPT_INJECTION]: The provided backend code examples process SQL queries as input. Although the examples include prefix validation and demonstrate the use of parameterized queries to mitigate risk, the handling of raw SQL represents an architectural surface that users must implement carefully.
Ingestion points: QueryRequest schema in references/CFA_ARCHITECTURE.md and req.body in the Node.js API example.
Boundary markers: The validate_query function implements an allowlist for SQL statement prefixes (SELECT, WITH, FROM, SUMMARIZE, DESCRIBE).
Capability inventory: The examples execute SQL commands against remote MotherDuck databases using standard database drivers.
Sanitization: Parameterized execution is used for values, while query structure is validated against an allowed prefix list.
[COMMAND_EXECUTION]: The references/EXECUTION_REFERENCE.md file contains shell command instructions (e.g., using uv run) for users to execute the provided local artifact examples during development and testing.

motherduck-build-cfa-app