Install
$ agentstack add skill-maxvaega-skillkit-file-reference-skill ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ● Filesystem access Used
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
File Reference Skill
This skill demonstrates how to use supporting files (scripts, templates, documentation) within a skill directory.
Overview
This skill uses helper scripts and templates for data processing. All supporting files are accessible via relative paths from the skill's base directory.
Available Supporting Files
Scripts
scripts/data_processor.py- Main data processing scriptscripts/validator.py- Input validation utilitiesscripts/helper.sh- Shell helper script
Templates
templates/config.yaml- Configuration templatetemplates/report.md- Report generation template
Documentation
docs/usage.md- Detailed usage instructionsdocs/examples.md- Example use cases
Usage
When this skill is invoked with arguments, it can access supporting files using the FilePathResolver:
from pathlib import Path
from skillkit.core.path_resolver import FilePathResolver
# Get the skill's base directory (injected by BaseDirectoryProcessor)
base_dir = Path("")
# Resolve supporting files securely
processor_script = FilePathResolver.resolve_path(base_dir, "scripts/data_processor.py")
config_template = FilePathResolver.resolve_path(base_dir, "templates/config.yaml")
usage_docs = FilePathResolver.resolve_path(base_dir, "docs/usage.md")
# Read file contents
with open(processor_script) as f:
script_code = f.read()
Processing Arguments
The skill expects data file paths as arguments:
Example invocation: file-reference-skill data/input.csv data/output.csv
Processing steps:
- Validate input using
scripts/validator.py - Process data using
scripts/data_processor.py - Generate report using
templates/report.md - Output results to specified location
Security Notes
- All file paths are validated to prevent directory traversal attacks
- Symlinks are resolved and verified to stay within skill directory
- Absolute paths and path traversal patterns (../) are blocked
- Any security violation raises PathSecurityError with detailed logging
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: maxvaega
- Source: maxvaega/skillkit
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.