fsskillprovider

func (*Provider) Index ¶

func (p *Provider) Index(ctx context.Context, def spec.SkillDef) (spec.ProviderSkillIndexRecord, error)

func (*Provider) LoadBody ¶

func (p *Provider) LoadBody(ctx context.Context, key spec.ProviderSkillKey) (string, error)

func (*Provider) ReadResource ¶

func (p *Provider) ReadResource(
	ctx context.Context,
	key spec.ProviderSkillKey,
	resourceLocation string,
	encoding spec.ReadResourceEncoding,
) ([]llmtoolsgoSpec.ToolOutputUnion, error)

func (*Provider) RunScript ¶

func (p *Provider) RunScript(
	ctx context.Context,
	key spec.ProviderSkillKey,
	scriptLocation string,
	args []string,
	env map[string]string,
	workdir string,
) (spec.RunScriptOut, error)

RunScript

Security / hardening responsibilities: This provider is intentionally thin and delegates most hardening to llmtools-go tools.

Provider responsibility (skill-specific):

• Ensure all filesystem access (read/execute) is scoped to the *skill root directory*. We do this by configuring the underlying tool sandbox as: allowedRoots = [skillRoot] workBaseDir = skillRoot

Tool responsibility (generic hardening; enforced by llmtools-go/exectool runscript):

• Path resolution/normalization and sandbox enforcement against allowedRoots
• Refuse symlink traversal (workdir + script path + parent components)
• Validate env/args (format + defense-in-depth limits)
• Safe argv-to-shell quoting and interpreter selection by extension
• Timeouts/output caps and process-tree termination
• Dangerous command blocking + optional heuristics

Note: By design, scripts may live anywhere under the skill root (ideally under "scripts/").

func (*Provider) Type ¶

func (p *Provider) Type() string