The Agent Skills Directory

[COMMAND_EXECUTION]: The site.sh script executes ssh and rsync commands to synchronize the generated site content to a remote host. These operations are essential to the skill's purpose as a deployment tool and require manual configuration of remote host details by the user.
[PERSISTENCE]: The install.sh script provides an optional --hook flag that installs a git pre-push hook. This hook automatically triggers the site's navigation rebuild and remote synchronization whenever the user performs a git push to the main branch. While this represents a persistent execution trigger tied to repository actions, it is a documented deployment feature.
[INDIRECT_PROMPT_INJECTION]: The build-nav.py script possesses an indirect prompt injection surface as it ingests untrusted data from the filesystem.
Ingestion points: The script recursively walks the site directory and reads the <title> and <h1> tags from every *.html file to generate labels for the navigation rail.
Boundary markers: The generated navigation content is injected into every page between explicit  and  comment markers.
Capability inventory: The skill has the capability to write to the local filesystem and perform network operations via ssh and rsync in site.sh.
Sanitization: The script uses html.escape() on all extracted titles and headers before rendering them into the navigation rail, which effectively prevents XSS and other injection attacks targeting the site's structure.

page-template