The Agent Skills Directory

[DYNAMIC_CONTEXT_INJECTION]: The file scripts/create-migration.md utilizes the !command syntax to execute shell commands (such as git, alembic, and date) at load time. These commands are used to provide the AI agent with relevant context about the current database state and recent code changes. These operations are limited to local development tools and do not involve network access or sensitive data exfiltration.
[COMMAND_EXECUTION]: The provided script scripts/detect-model-changes.py executes git and alembic commands via subprocess.run to analyze the local repository state. The script processes local files using the Python ast module for static analysis. This behavior is transparent and consistent with the skill's stated purpose of assisting with database migration management.
[INDIRECT_PROMPT_INJECTION]: The scripts/detect-model-changes.py script reads and parses local Python files to detect SQLAlchemy models. While this represents a surface where untrusted data (local code) enters the agent's context, the script performs static analysis only and does not execute the parsed content. Boundary markers and the developer-centric use case mitigate the risk of the agent being misled by malicious patterns in the analyzed code.

database-patterns