The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill uses curl -L to download 3D assets (e.g., GLB, FBX files) from URLs generated by the asset_download tool. These downloads are directed toward the service's own infrastructure for asset retrieval.
[COMMAND_EXECUTION]: The skill utilizes shell commands for its core functionality, specifically curl for asset retrieval and npx for installing supplementary skills from the vendor's own repository (scenario-labs/skills).
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user input (prompts for 3D generation and mesh editing) and interpolates them into model execution calls.
Ingestion points: User-supplied prompts are used as parameters for the model_run and recommend tools in SKILL.md.
Boundary markers: No explicit delimiters or instructions to ignore embedded commands within user input are provided.
Capability inventory: The skill possesses capabilities to perform network downloads (curl), install additional executable skills (npx), and interact with 3D generation models.
Sanitization: No evidence of sanitization, escaping, or validation of user-provided prompt strings is present in the instructions.

scenario-3d