The Agent Skills Directory

[COMMAND_EXECUTION]: The SKILL.md file includes a Python script that the agent is instructed to run within a local virtual environment (.artvenv). This script uses the PIL (Pillow) and yaml libraries to process project data and generate visual artifacts.
[PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by processing external configuration data.
Ingestion points: The skill reads art-spec.yaml located in the project's Assets directory to configure its art production pipeline.
Boundary markers: The instructions do not explicitly define boundary markers or instruct the agent to ignore potential instructions embedded within the YAML data.
Capability inventory: The associated script has the capability to create directories and write files to the local file system.
Sanitization: While the script uses yaml.safe_load for secure parsing, it fails to sanitize or validate the master_palette_png output path extracted from the YAML, which could theoretically be manipulated to perform path traversal or overwrite existing project files.

unity-art-direction