The Agent Skills Directory

[DYNAMIC_CONTEXT_INJECTION]: The skill uses the !command syntax within scripts/create-fastapi-app.md to automatically detect project metadata during template generation. \n
Evidence: Shell commands such as python --version, git rev-parse, and grep are executed to identify the Python version, project root, and existing dependencies. \n
Assessment: These operations are limited to local diagnostic information and do not involve network exfiltration or access to sensitive credentials. \n- [INDIRECT_PROMPT_INJECTION]: The application generation script scripts/create-fastapi-app.md accepts user input that is interpolated into generated Python code, creating a surface for potential injection. \n
Ingestion points: User-provided application names are accepted via the $ARGUMENTS variable. \n
Boundary markers: Absent; input is directly placed into Python string literals and docstrings. \n
Capability inventory: The skill has access to tools for file manipulation and web searches. \n
Sanitization: Absent; there is no escaping or validation of the user-provided string before it is included in the generated source code.

python-backend