The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data which could potentially contain malicious instructions.
Ingestion points: Reads project configuration from parameters.json and project.json (in apps/desktop/cad_workbench/core.py). It also performs knowledge retrieval (RAG) by scanning local skill files and user-provided directories for context interpolation (in apps/desktop/cad_workbench/knowledge_retrieval.py).
Boundary markers: Prompts are constructed with clear headers like "【任务目标】", "【强制规则】", and "【最终响应格式】" in apps/desktop/cad_workbench/agent_contracts.py to separate system instructions from data.
Capability inventory: The skill can execute system commands via subprocess, compile source code, and has extensive file system access within the workspace (demonstrated in apps/desktop/cad_workbench/agent_contracts.py and queue_worker.py).
Sanitization: It implements ID and filename sanitization through safe_id and validate_basename. A "Policy Gate" system is implemented to require human approval for high-risk capabilities like git_push and danger-full-access (in apps/desktop/cad_workbench/agent_contracts.py).
[DYNAMIC_EXECUTION]: The skill compiles and executes code at runtime to interface with CAD applications.
Evidence: subskills/solidworks-fillet-chamfer-cnc/scripts/hold_line_bridge.py invokes csc.exe (.NET compiler) and cl.exe (MSVC compiler) to build bridge components for SolidWorks. subskills/autocad-automation/scripts/acad_dotnet_regression.py builds a C# project for AutoCAD. This is a functional requirement for deep CAD integration but increases the complexity of the execution environment.
[PRIVILEGE_ESCALATION]: The skill performs operations that typically require administrative privileges on Windows systems.
Evidence: dotnet/CadStudio.SolidWorks.AddinHost/SwAddin.cs writes to HKEY_LOCAL_MACHINE\SOFTWARE\SOLIDWORKS\Addins to register its COM Add-in. The installation script mcp-server/register_all_ai_mcp.ps1 uses the PowerShell -ExecutionPolicy Bypass flag. These behaviors are documented as part of the tool's core installation and setup process.
[COMMAND_EXECUTION]: Extensive use of shell command execution for system automation.
Evidence: Various scripts use subprocess.run and subprocess.check_call to manage worker processes, run CAD solvers (CalculiX), and manage environment dependencies (e.g., in scripts/fea_analysis.py and scripts/sw_preflight.py). subskills/autocad-automation/scripts/acad_preview.py executes a dynamically generated PowerShell script to perform image conversions.

solidworks-automation