The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill fetches installation archives from Steam's official Content Delivery Network.
Evidence: curl -sqL "https://steamcdn-a.akamaihd.net/client/installer/steamcmd_linux.tar.gz" and steamcmd.zip from the same domain.
[PRIVILEGE_ESCALATION]: The instructions include the use of administrative privileges to install necessary 32-bit system libraries on Linux.
Evidence: sudo apt-get install -y lib32gcc-s1 in the installation workflow.
[CREDENTIALS_UNSAFE]: The skill provides guidance on locating and extracting sensitive Steam authentication tokens to enable automated logins in CI/CD environments.
Evidence: Reference to ~/.steam/config/config.vdf and instructions to base64-encode this file for storage as a secret.
[INDIRECT_PROMPT_INJECTION]: The skill processes user-provided Valve Data Format (VDF) files, which serves as an ingestion point for untrusted data that could influence the agent's generated scripts.
Ingestion points: app_build.vdf, workshop_item.vdf (SKILL.md)
Boundary markers: Absent
Capability inventory: Shell command execution via steamcmd (SKILL.md)
Sanitization: Absent

steam-steamcmd-helper