The Agent Skills Directory

[DYNAMIC_EXECUTION]: The script scripts/run.py resolves the repository root at runtime by traversing parent directories and injects it into sys.path to import internal modules from a tooling package. This dynamic loading from computed paths allows the skill to access shared utilities but modifies the execution environment based on the local file system layout.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from UNITS.csv and PIPELINE.lock.md to determine which file paths to verify. Although the script primarily checks for file existence and writes a status report, the processing of externally provided path definitions represents a potential injection surface for influencing the auditor's report or triggering unexpected file system access checks.

artifact-contract-auditor