The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes a PowerShell script locally to programmatically generate a favicon.ico file using the System.Drawing namespace. This script creates a bitmap from logo parameters and saves it to the workspace before converting it to base64 for upload.
[DYNAMIC_EXECUTION]: The favicon generation process involves the dynamic assembly of PowerShell code where the agent interpolates user-specific RGB color values and graphic motifs into a predefined script template.
[CREDENTIALS_UNSAFE]: The instructions for managing FTP passwords via ftp_tool indicate that the ftp_password_set and ftp_password_change actions return the password in plain text in the API response. This results in sensitive credentials being processed directly within the agent's execution context.
[INDIRECT_PROMPT_INJECTION]:
Ingestion points: The skill ingests untrusted user requirements for site structure, brand colors, and SEO metadata as described in references/PLAYBOOK.md.
Boundary markers: No explicit boundary markers or delimiters are defined to isolate user-supplied strings from the generated HTML, CSS, and JS code.
Capability inventory: The skill possesses capabilities for local file I/O (PowerShell), network communication with the uCoz MCP API, and modification of site templates and modules.
Sanitization: There is no documentation of sanitization or escaping logic for user input before it is interpolated into site assets.

ucoz-landing-skill