The Agent Skills Directory

[DYNAMIC_CONTEXT_INJECTION]: The SKILL.md file uses shell command substitution at load time to gather context about the project. Specifically, it executes find to locate YAML schema files and cat to read the .infrahub.yml configuration. These are benign reconnaissance operations intended to inform the agent about the local environment.
[EXTERNAL_DOWNLOADS]: The included script scripts/fetch_schema_limits.py is designed to download JSON schema definitions from https://schema.infrahub.app. This domain is the official resource for Infrahub schema documentation. The script uses standard Python libraries for the fetch and is a legitimate component of the skill's validation functionality.
[INDIRECT_PROMPT_INJECTION]: The skill is configured to read and analyze local YAML files and project configuration. This creates an attack surface where malicious instructions could be embedded in schema data. However, the skill treats these files as structural data to be validated and formatted, and the risk is considered low given the intended use case as a developer tool.

infrahub-managing-schemas