The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill uses pnpm dlx @saleor/configurator in bash and JavaScript examples. This command downloads and executes the Saleor Configurator CLI. As the skill author is 'saleor' and the package is a recognized vendor resource, this is considered standard functional behavior.
[COMMAND_EXECUTION]: The skill demonstrates how to execute the CLI via subprocesses (pnpm dlx in bash and execSync in Node.js) to automate tasks like deployment, validation, and diffing. These operations are performed on the vendor's own infrastructure (e.g., saleor.cloud) and are consistent with the skill's stated purpose.
[INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing external data by parsing JSON output from a CLI tool. The examples use safe parsing methods like jq and JSON.parse(). While this constitutes a data ingestion point, it is restricted to the output of a specific, trusted CLI tool and does not provide an obvious path for malicious instruction injection.

agent-output-parsing