The Agent Skills Directory

[COMMAND_EXECUTION]: The module scripts/web_scraper_fallback.py invokes a script from an external skill (web-scraper) using subprocess.run(). The implementation uses a list-based argument passing mechanism which avoids shell interpretation and mitigates common command injection risks. However, the logic relies on a hardcoded absolute file path for the external dependency (C:\Users\renat\skills\web-scraper\scripts\scrape.py).- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the Chromium browser via Playwright (playwright install chromium) and several standard Python packages to perform automated web navigation and data processing.- [SAFE]: The skill implements security best practices for data handling, specifically in scripts/export.py and scripts/serve_api.py, where it sanitizes exported cells starting with specific characters ([=+@-]) to protect against CSV Injection (Formula Injection) attacks.- [SAFE]: A path validation routine (safe_user_path) is employed in scripts/export.py to ensure that file export operations are confined to the current workspace, preventing directory traversal vulnerabilities.- [SAFE]: The scrapers target public information on official government domains (.gov.br). The network operations use standard TLS verification by default, with an optional environment variable toggle to handle legacy sites with invalid certificates.

junta-leiloeiros