The Agent Skills Directory

[COMMAND_EXECUTION]: The privacy-publish module utilizes the Bash tool to execute a local Python script (asc.py) for interacting with the App Store Connect API. This script is used to PATCH metadata fields like the Privacy Policy and Support URLs. The execution relies on finding the script in a relative _shared/ directory or known global configuration paths.
[INDIRECT_PROMPT_INJECTION]: The workflow involves reading legal documents located in the .planning/legal/ directory to render them into HTML or publish them to web platforms. These files represent an ingestion point for external data.
Ingestion points: Reads legal drafts from .planning/legal/privacy.md and .planning/legal/terms.md for processing.
Boundary markers: None explicitly mentioned in the file reading logic; the content is treated as the primary payload for rendering and publishing.
Capability inventory: The skill has access to the Bash tool for local script execution and browser automation tools for CMS interaction.
Sanitization: No explicit sanitization or verification of the document content is performed before the rendering or API update steps.

legal