The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill provides commands to view logs from the local development containers (dev docker logs), which allows an agent to ingest potentially untrusted data from the application's output. If these logs contain malicious instructions, they could influence the agent's behavior. The skill grants high-privilege capabilities such as executing arbitrary commands inside containers (dev docker exec) and opening interactive shells (dev docker shell), which increases the potential impact of such injections.* Ingestion Points: Log output from services like 'api', 'worker', and 'web' (SKILL.md, rules/view-logs.md).* Capability Inventory: Command execution via dev docker exec and shell access via dev docker shell (rules/shell-and-workflows.md).* Boundary Markers: No explicit delimiters or instructions to ignore embedded content in logs are specified.* Sanitization: No sanitization or filtering of log content is implemented.- [DYNAMIC_EXECUTION]: The skill documents templates for executing dynamically assembled Python scripts via docker exec to trigger background jobs or perform database operations (rules/payment-testing.md). These scripts are constructed at runtime and executed within the container environment.* Evidence: The skill instructs agents or users to run complex Python one-liners such as docker exec polar-app--api-1 sh -c 'cd /app/server && uv run python -c "..."'.- [CREDENTIALS_UNSAFE]: The skill contains hardcoded default credentials for local development infrastructure services (rules/service-architecture.md). While these are intended for a local, isolated environment, they are literal values rather than placeholders.* Evidence: Database credentials (polar / polar), MinIO console credentials (polar-development / polar123456789), and Grafana login (polar / polar).- [EXTERNAL_DOWNLOADS]: The skill automates the installation of tools and dependencies from well-known and trusted external services.* Evidence: The dev stripe --listen command handles the installation of the Stripe CLI (rules/payment-testing.md).* Evidence: The uv sync process fetches git dependencies from GitHub (rules/troubleshooting.md).- [COMMAND_EXECUTION]: The skill's primary function is the execution of local development commands via the dev docker CLI and standard Docker commands, which is necessary for its stated purpose but provides a broad interface for system interaction.

local-environment