uPj,`dZddlZddlZddlmZddlmZmZddlm Z ddl m Z GddZ y) z Prompt Injection Handler for LiteLLM Skills Handles extraction of skill content (SKILL.md) from stored ZIP files and injection into the system prompt for non-Anthropic models. N)BytesIO)AnyFinal)verbose_logger)LiteLLM_SkillsTablec eZdZdZdededzfdZdedeeeffdZ ddede ed e defd Z d e edeee ffd Zdedeee ffd Zdedeee ffdZy)SkillPromptInjectionHandlera Handles skill content extraction and system prompt injection. Responsibilities: - Extract SKILL.md content from skill ZIP files - Extract ALL files from ZIP for code execution - Inject skill content into system message - Create execute_code tool definition skillreturnNc |js |jS t|j}tj|d5}|j D]a}|j ds|j|jd}|s8d|jxs |jd|ccdddS|j D]a}|j ds|j|jd}|s8d|jxs |jd|ccdddS|j D]a}|j ds|j|jd}|s8d|jxs |jd|ccdddS ddd|jS#1swY|jSxYw#t$r6}tjd |j|Yd}~|jSd}~wwxYw) ap Extract skill content from the stored zip file. Looks for SKILL.md or README.md in the zip and returns its content. This content describes the skill's capabilities and instructions. Args: skill: The skill from LiteLLM database Returns: The skill content as a string, or None if not available rzSKILL.mdzutf-8z ## Skill: z Nz README.mdz.mdzGSkillPromptInjectionHandler: Error extracting content from skill %s: %s) file_content instructionsrzipfileZipFilenamelistendswithreaddecode display_titleskill_id Exceptionrwarning)selfr zip_bufferzfnamecontentes w/home/oem/CyberBrain26-unified/.venv/lib/python3.12/site-packages/litellm/llms/litellm_proxy/skills/prompt_injection.pyextract_skill_contentz1SkillPromptInjectionHandler.extract_skill_contents!!%% %  '(:(: ;JS1 eRKKMeD}}Z0"$''$-"6"6w"?"%/0C0C0Uu~~/VVZ[bZc#dd  e eeKKMeD}}[1"$''$-"6"6w"?"%/0C0C0Uu~~/VVZ[bZc#dd e eeKKMeD}}U+"$''$-"6"6w"?"%/0C0C0Uu~~/VVZ[bZc#dd) e e e! e4!!!5 e4!!!    " "Y[`[i[ikl  !!!  s}+G%F7+"F7!F7/ G9%F7"F7!F7# G-%F7"F76!F7 G!F7#G7G <G G H !HH ci}|js|S t|j}tj|d5}|j D]}|j dr|j d}t|dkDrdj|dd}n|}|sNtj|}|jdstj|r"tjd|j||j!|||< ddd|S#1swY|SxYw#t"$r,} tjd|j| Yd} ~ |Sd} ~ wwxYw)a Extract ALL files from skill ZIP for code execution. Returns a dict mapping file paths to their binary content. The paths have the skill folder prefix removed (e.g., "slack-gif-creator/core/..." -> "core/..."). Args: skill: The skill from LiteLLM database Returns: Dict mapping file paths to binary content r /Nz..zMSkillPromptInjectionHandler: Skipping entry with invalid path in skill %s: %szESkillPromptInjectionHandler: Error extracting files from skill %s: %s)rrrrrrsplitlenjoin posixpathnormpath startswithisabsrrrrr) rr filesrrrparts clean_path normalizedrs r extract_all_filesz-SkillPromptInjectionHandler.extract_all_filesJsQ*,!!L  '(:(: ;JS1 6RKKM6D}}S) !JJsOE5zA~%(XXeABi%8 %) % "+!3!3J!?J!,,T2iooj6Q&..k!NN  !(* E*%36 6@ A 6@    " "WY^YgYgij    s5+D'CDD'D$D'$D'' E0!EEdataskill_contentsuse_anthropic_formatc|s|Sddj|z}|r3|jdd}|r ||z|d<|S|j|d<|S|jdg}|s|Sd}t|D].\}} t | t s| jddk(s,|}n|!||jdd} | |z||d<n#|j d d|jd ||d<|S) ag Inject skill content into the system prompt. For Anthropic messages API (use_anthropic_format=True): - Injects into top-level 'system' parameter (not in messages array) For OpenAI-style APIs (use_anthropic_format=False): - Injects into messages array with role="system" Args: data: The request data dict skill_contents: List of skill content strings to inject use_anthropic_format: If True, use top-level 'system' param for Anthropic Returns: Modified data dict with skill content in system prompt z --- # Available Skills z --- systemmessagesNrolerr)r8r)r'getstrip enumerate isinstancedictinsert) rr1r2r3 skill_sectioncurrent_systemr7system_msg_idximsgcurrent_contents r inject_skill_content_to_messagesz>11#s;CCCM ((rE,=,=rATATrZabgbpbpaqXr "& { o -%&;!(;>j>!NN..|>11#s;CCCM ((rE,=,=rATATrZabgbpbpaqXr !% { o -%&;!(;>j>!NN..|,"3:,"\4':4tCJ?O4nSX88*.s)8KO8 8t) d3i) DcN) V++>+4S>+Z! 5H! TRUWZRZ^! rFr ) rtr(riortypingrrlitellm._loggingrlitellm.proxy._typesrr ryrFr r~s*+4b b rF