The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/check-fixture.py uses subprocess.run to execute a synthetic probe script. The execution is constrained by a list-style argument call (preventing shell injection), a 5-second timeout, and uses the local sys.executable environment.
[DYNAMIC_EXECUTION]: The validation script scripts/check-fixture.py dynamically generates a temporary Python file from a hardcoded string (PROBE) to test state transition logic. This is a controlled self-test mechanism and does not execute untrusted external code.
[INDIRECT_PROMPT_INJECTION]: The skill instructions (SKILL.md) define a workflow for processing design questions and external code snippets. While this creates a data ingestion surface, the skill explicitly mandates the use of synthetic data, finite execution bounds, and safety instrumentation to mitigate risks.

prototype