The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill analyzes local configuration files (e.g., package.json, next.config.js) to automate framework detection and configuration. These files are untrusted inputs that could potentially contain malicious content designed to influence the agent's command execution.
Ingestion points: Local project configuration files read during the framework detection phase in SKILL.md.
Boundary markers: No specific delimiters or warnings for embedded instructions are used.
Capability inventory: Bash, Write, Edit, and Read tools used across operational workflows.
Sanitization: Content from configuration files is processed without explicit sanitization before being used to generate setup commands.
[DYNAMIC_EXECUTION]: The wattpm patch-config utility documented in references/wattpm-cli.md facilitates the execution of JavaScript logic from local patch files to modify runtime and application configurations. While this is a functional feature of the platform, it involves dynamic loading from local paths.
[REMOTE_CODE_EXECUTION]: The deployment documentation (references/deployment/cloud.md) provides instructions to download and execute the Fly.io CLI installation script from https://fly.io/install.sh. Fly.io is a well-known service.
[EXTERNAL_DOWNLOADS]: The skill fetches configuration schemas from the vendor's domain (https://schemas.platformatic.dev) and installs required libraries from public package registries.

watt