The Agent Skills Directory

[COMMAND_EXECUTION]: The skill facilitates local environment setup through commands such as git clone, pnpm install, and docker compose. These operations are conducted within a guided SOP and require explicit user confirmation before execution.\n- [EXTERNAL_DOWNLOADS]: The skill downloads the application source code from the official vendor repository at github.com/THU-MAIC/OpenMAIC.git. This is a necessary step for the local deployment functionality of the skill.\n- [DATA_EXFILTRATION]: In its 'hosted mode', the skill transmits classroom generation parameters and processed PDF content to the vendor's API at open.maic.chat. This data transfer is the intended primary function of the hosted service and is secured using authorization headers read from local configuration files.\n- [PROMPT_INJECTION]: An indirect prompt injection surface is present as the skill processes user-defined requirements and local PDF content to generate classroom outlines.\n
Ingestion points: Data enters the context via the requirement user input and the pdfContent field during the classroom generation phase.\n
Boundary markers: The skill requires user confirmation before reading local files but does not specify internal delimiters for the data payload sent to the API.\n
Capability inventory: The skill possesses the ability to read local files, perform network requests to specific APIs, and execute shell commands for environment setup.\n
Sanitization: No explicit sanitization logic is contained within the skill instructions; protection relies on the security measures of the OpenMAIC server-side processing engine.

openmaic