The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses a Python script (toolkit/scripts/forge.py) for image processing. The script does not execute shell commands or use subprocess; its self-test functionality calls its own main function recursively via internal function calls rather than a shell.
[DATA_EXFILTRATION]: No network operations or data exfiltration patterns were detected. The script operates entirely on local files and does not contain any code for network connectivity.
[SAFE]: The Python script includes a safe_path function that explicitly checks for directory traversal (..) and prevents the use of symlinks, which mitigates potential file system access vulnerabilities. It also handles Image.DecompressionBombError to prevent resource exhaustion from maliciously crafted images.
[SAFE]: File writing operations use the xb mode (exclusive creation), which ensures that the tool only writes to new directories and cannot be used to overwrite existing system or user files.

omh-sprite-forge