The Agent Skills Directory

[COMMAND_EXECUTION]: The scripts/Setup-HouseCarl.ps1 script performs extensive system discovery and configuration tasks. It executes shell commands like cmd /c mklink and cmd /c rmdir to manage file system junctions for the Vortex mod manager shim. It also executes dotnet --list-runtimes to verify the presence of required runtimes.
[INDIRECT_PROMPT_INJECTION]: The skill's primary function is to read and edit third-party Skyrim mod records and scripts. This creates a vulnerability surface for indirect prompt injection if those external mod files contain malicious instructions. (1) Ingestion points: Multiple tools like housecarl_read_record and housecarl_decompile_script ingest data from local mod files into the agent context. (2) Boundary markers: Absent. The instructions do not define delimiters or warnings to ignore instructions embedded in the processed mod data. (3) Capability inventory: High. The skill can write files and modify plugin records. (4) Sanitization: Absent. No evidence of content sanitization.
[PRIVILEGE_ESCALATION]: Documentation recommends executing the setup script using the ExecutionPolicy Bypass flag. The script also attempts to create symbolic links which often requires administrative privileges.
[PERSISTENCE]: The Setup-HouseCarl.ps1 script persists configuration at the User environment level by setting variables like HOUSECARL_MCP. It also modifies local configuration files for Grok and Codex.
[EXTERNAL_DOWNLOADS]: The skill provides instructions to download the .NET runtimes from Microsoft's official site (dotnet.microsoft.com). This targets a well-known service and is documented for legitimate dependency management.

housecarl