The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The scripts/setup.sh script and the SKILL.md documentation facilitate the download and installation of an external binary component (twozero.tox) from https://www.404zero.com/pisang/twozero.tox. This domain is not a verified or well-known service provider.\n- [COMMAND_EXECUTION]: The skill provides tools like td_execute_python and td_input_execute. The former allows for the execution of arbitrary Python code with unrestricted access to the application's process environment. The latter allows for simulated mouse and keyboard input, which can be used to interact with the host operating system's user interface.\n- [DYNAMIC_EXECUTION]: The skill uses runtime generation and execution for controlling the application, including the creation of Python callbacks and GLSL shaders as documented in references/dat-scripting.md and references/glsl.md.\n- [INDIRECT_PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection due to its architecture for processing untrusted external data.\n
Ingestion points: Data enters the agent context through webDAT, websocketDAT, mqttClientDAT, serialDAT, and tcpipDAT (referenced in references/external-data.md).\n
Boundary markers: The provided examples do not use delimiters or instructions to ignore embedded commands in the ingested data.\n
Capability inventory: The skill utilizes powerful tools such as td_execute_python, td_write_dat, and td_create_operator (referenced in SKILL.md).\n
Sanitization: No sanitization or filtering logic is provided for the external content before it influences tool parameters.\n- [PRIVILEGE_ESCALATION]: Documentation in references/external-data.md advises the user to use sudo chmod 666 to modify system device file permissions for serial communication.

touchdesigner-mcp