The Agent Skills Directory

[COMMAND_EXECUTION]: The file full_story_bulk_delete_metadata_values.py contains a destructive execute() function that performs a mass .delete() operation on the ContractKeyPointer model. The current logic filters only by contract ID and workspace, meaning it will delete all metadata associated with the contracts rather than a specific targeted field, posing a high risk of data loss.
[COMMAND_EXECUTION]: The SKILL.md file documents multiple investigation and recovery workflows that involve direct SQL queries and Django ORM mutations (ContractKeyPointer.objects.bulk_update, ContractKeyPointer.objects.bulk_create) on production environments. These operations carry significant operational risk if suggested or performed by an agent without strict oversight.
[PROMPT_INJECTION]: The skill exhibits an Indirect Prompt Injection surface (Category 8) by design:
Ingestion points: The skill is designed to process external data sources such as Salesforce exports, sheets, and Slack instructions (documented in SKILL.md Step 2).
Boundary markers: The provided scripts and workflows lack programmatic delimiters or 'ignore instructions' markers when handling data that influences the scope of the deletion.
Capability inventory: The skill has the capability to perform database deletions, mass record creation, and trigger asynchronous search resync tasks (partially_resync_contracts_task.delay).
Sanitization: There is no automated sanitization or schema validation for the external contract lists in the provided Python artifact; the skill relies entirely on manual user verification of row counts.

bulk-delete-contract-metadata-values