The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes shell commands using npx to invoke the Transloadit CLI for merging images and retrieving assembly status.
[EXTERNAL_DOWNLOADS]: Fetches the official @transloadit/node package from the NPM registry at runtime via the npx -y command.
[CREDENTIALS_UNSAFE]: The instructions direct the agent to resolve API credentials from sensitive local file paths, including .env files and the vendor-specific ~/.transloadit/credentials file.
[INDIRECT_PROMPT_INJECTION]: The skill ingests external data (local image files) which are passed as arguments to a command-line tool, creating a potential surface for indirect injection if malicious metadata or filenames are processed.
Ingestion points: Local image file paths provided as absolute paths to the --input flag in SKILL.md.
Boundary markers: None present; the agent is instructed to use the provided paths directly.
Capability inventory: Command execution (npx), local file system access (read/write), and network communication with the Transloadit API.
Sanitization: The skill does not specify any sanitization or validation logic for the input file paths or their contents before they are processed by the CLI tool.

transform-build-mosaic-collage-with-transloadit