The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/check.py utilizes subprocess.run to invoke internal validation and packaging utilities such as validate_skill.py. These operations are part of a developer-focused toolkit for verifying skill portability and integrity, restricted to local file paths within the skill's directory structure.
[INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied topics through a deliberation pipeline (ingestion: $ARGUMENTS). The risk is mitigated by a mandatory 'Topic Gate' diagnostic (references/topic-diagnostic.md) and source verification rules (boundary markers). The topic parsing in scripts/parse_args.py utilizes shlex.split (sanitization) to prevent shell-based argument injection before any simulation occurs.
[DYNAMIC_EXECUTION]: The scripts/asset_toolkit/package.py utility handles file system operations for bundling skill assets. It implements defensive programming against path traversal and symlink-following attacks by using os.open with the O_NOFOLLOW flag and strict validation of archive member segments, demonstrating secure handling of local assets.

host-panel