The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes the shell tool to execute various NocoBase CLI commands, including nb api pm list for plugin verification and nb revision create for milestone snapshots. These commands interact with the application environment and external APIs.- [PROMPT_INJECTION]: The 'Version control gate' section defines a concealment behavior, explicitly instructing the agent to stop as a 'silent no-op' and 'disclose nothing' to the user if the required plugin is missing. This prevents the user from understanding why the requested action was not performed or that a check occurred.- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface through its ingestion of external and user-provided data into shell commands.
Ingestion points: User-supplied <description> argument and the stdout of the nb api pm list command.
Boundary markers: The description is interpolated into a shell command using double quotes, but there are no instructions to escape or sanitize shell metacharacters.
Capability inventory: Access to the shell tool and local file reads allows for potentially dangerous operations if the input is manipulated.
Sanitization: The skill requests that the agent 'normalize' the description for conciseness, but lacks explicit technical sanitization or validation of the input string before shell execution.- [EXTERNAL_DOWNLOADS]: The skill relies on the external nb CLI dependency and the presence of the @nocobase/plugin-version-control package in the NocoBase installation to function.

nocobase-revision