The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The Cartographer role definition in references/roles/cartographer.md recommends installing a third-party tool 'archify' from an untrusted repository using the command npx skills add tt-a1i/archify -g.
[EXTERNAL_DOWNLOADS]: The sync setup functionality in scripts/lib/sync.sh facilitates the download and installation of the Syncthing daemon via the system package manager (e.g., apt, dnf, pacman) when it is not already present.
[COMMAND_EXECUTION]: The local dashboard server (dashboard/server.py) and its CLI wrapper (dashboard/dave_cli.py) execute the skill's own shell scripts (dave.sh) using Python's subprocess.run to perform state updates and reads.
[PRIVILEGE_ESCALATION]: The scripts/lib/sync.sh script includes commands that use sudo to install system packages. These operations are designed to be interactive and require explicit user approval on a TTY.
[INDIRECT_PROMPT_INJECTION]: The skill maintains a priority list by ingesting data from external sources like Redmine tickets and Kanban boards, which represents a potential attack surface.
Ingestion points: External data enters the agent context through dave.sh intake and Redmine query results, documented in references/kanban-intake.md and references/redmine.md.
Boundary markers: The system uses specific return formats and fenced blocks for sub-agent communication to help isolate external data (defined in references/roles/*.md).
Capability inventory: The skill has the capability to write to the local filesystem (~/.dave), manage git repositories, and make authenticated network requests to Redmine APIs via curl.
Sanitization: All ingested data is processed through a specialist agent (Quartermaster) which produces a diff for manual review and approval by the user before being incorporated into the persistent state.

dave