The Agent Skills Directory

[External Tool Installation]: The buck_parity.md file provides instructions to download the buck2 build tool from an external GitHub repository belonging to a well-known organization. This represents an external dependency that is fetched and executed locally as part of the developer setup.
[Privilege Escalation]: The installation instructions for the external build tool include the use of sudo to move the downloaded binary into a system directory (/usr/local/bin/). While this is a common practice for global tool installations, it involves acquiring elevated permissions to modify system paths.
[Indirect Prompt Injection Surface]: The qnn_intermediate_debugger.md workflow allows the agent to read and transform user-provided Python scripts. This capability creates an ingestion point where untrusted data (the user's code) is processed by the agent. Without explicit boundary markers or sanitization mentioned in the instructions, there is a low risk that embedded comments or logic within a processed script could influence the agent's behavior during the transformation process.

qualcomm