The Agent Skills Directory

[SAFE]: The Python utility scripts/sbom_inventory.py implements security best practices by validating that input paths are regular files and not symbolic links using Path.is_symlink() and the os.O_NOFOLLOW flag. It also enforces a 10MiB file size limit and a recursion depth limit of 20 to prevent resource exhaustion or stack overflow during the processing of nested JSON components.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from CycloneDX JSON files via the sbom_inventory.py script (Ingestion point). The instructions in SKILL.md provide clear boundary markers by telling the agent to treat all scanner output as untrusted and not to follow embedded commands (Boundary markers). The script's capability inventory is strictly limited to reading and hashing local file content with no network or write access (Capability inventory). The processing includes strict JSON schema validation and type checking (Sanitization).
[DATA_EXFILTRATION]: No data exfiltration patterns were detected. The skill instructions emphasize keeping internal package names and SBOMs within approved storage, and the inventory script lacks any network capabilities or credentials access patterns.
[EXTERNAL_DOWNLOADS]: The skill references documentation and integration plugins from well-known technology organizations and services, including the CycloneDX GitHub organization and the official Spring Boot documentation, for the purpose of establishing a secure dependency verification workflow.

java-supply-chain-security