The Agent Skills Directory

[SAFE]: The parse_cassette.py script uses yaml.safe_load() to parse VCR cassette files, which prevents arbitrary code execution vulnerabilities during YAML deserialization.
[COMMAND_EXECUTION]: The skill provides instructions for executing pytest and git diff commands. These are standard development tools and the usage patterns provided (including source .env) are consistent with legitimate software testing workflows.
[INDIRECT_PROMPT_INJECTION]: The parse_cassette.py script reads and displays the contents of request and response bodies from local YAML cassette files. While this represents a data ingestion surface for the agent, the risk is negligible as it involves processing local test artifacts created by the developer, and the script includes logic to truncate large base64 strings.

testing-skill