Skip to content

docs(skills): expand extxyz format documentation in dpdata-cli skill#1036

Open
SchrodingersCattt wants to merge 8 commits into
deepmodeling:masterfrom
SchrodingersCattt:docs/extxyz-skill-expansion
Open

docs(skills): expand extxyz format documentation in dpdata-cli skill#1036
SchrodingersCattt wants to merge 8 commits into
deepmodeling:masterfrom
SchrodingersCattt:docs/extxyz-skill-expansion

Conversation

@SchrodingersCattt

@SchrodingersCattt SchrodingersCattt commented Jul 17, 2026

Copy link
Copy Markdown
Contributor

Summary

Expand the dpdata-cli SKILL with detailed extended XYZ (extxyz) format documentation.

Motivation

The extxyz format has 6 registered aliases (extxyz, quip/gap/xyz, quip/gap/xyz_file, mace/xyz, nequip/xyz, gpumd/xyz) that all point to the same QuipGapXYZFormat class. AI agents and users frequently do not know these are equivalent, leading to confusion. Additionally, plain xyz vs extxyz is a common source of errors.

Changes

  • Updated YAML frontmatter description to mention extxyz aliases
  • Added new section with:
    • Format aliases table
    • Clear xyz vs extxyz disambiguation
    • File structure documentation
    • Recognized header key variants
    • Stress/virial conversion conventions
    • CLI examples specific to extxyz
    • Tips for correct format specification

Scope

  • 1 file changed: skills/dpdata-cli/SKILL.md (+77 lines)
  • All claims traceable to source code
  • No behavioral changes, no new dependencies

Summary by CodeRabbit

  • Documentation
    • Updated dpdata-cli format support documentation (still highlights “50+ formats”) with revised examples, including focus on deepmd/npy and other application formats.
    • Added an Extended XYZ (extxyz) Format Details section covering equivalent aliases, an explicit note that plain xyz is different, and practical CLI examples (including heterogeneous frames with --multi) plus usage tips.

@dosubot dosubot Bot added size:M This PR changes 30-99 lines, ignoring generated files. documentation dpdata labels Jul 17, 2026
@coderabbitai

coderabbitai Bot commented Jul 17, 2026

Copy link
Copy Markdown

Review Change Stack

Warning

Review limit reached

@SchrodingersCattt, you've reached your PR review limit, so we couldn't start this review.

Next review available in: 38 minutes

Enable usage-based reviews in Billing to review now. Otherwise, wait until the next included review is available.
You're only billed for reviews past your plan's rate limits ($0.25/file).

How can I continue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based reviews.

How do review limits work?

CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan review availability.

For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, additional reviews become available more gradually as earlier reviews age out of the rolling window.

Please refer docs for additional details.

Review details
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 301c1c6f-5442-4707-a4ea-f468f14601a6

📥 Commits

Reviewing files that changed from the base of the PR and between 3782f44 and 797223d.

📒 Files selected for processing (1)
  • skills/dpdata-cli/SKILL.md
📝 Walkthrough

Walkthrough

The dpdata-cli skill documentation updates its supported-format examples and adds guidance for Extended XYZ aliases, plain xyz distinctions, heterogeneous frames, type maps, and CLI usage.

Changes

Extended XYZ documentation

Layer / File(s) Summary
Document extxyz formats and CLI usage
skills/dpdata-cli/SKILL.md
The skill description updates supported-format examples, while a new section documents extxyz aliases, the distinction from plain xyz, CLI conversion examples, heterogeneous frames, type maps, and usage tips.

Estimated code review effort: 1 (Trivial) | ~2 minutes

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly summarizes the main change: expanded extxyz documentation for the dpdata-cli skill.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 2

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@skills/dpdata-cli/SKILL.md`:
- Line 227: Update the conversion documentation to state that virial uses the
configured stress_sign, with stress_sign = -1 representing the default ASE
convention, rather than presenting virial = −volume × stress as unconditional.
Clarify that non-default stress_sign values alter the conversion accordingly.
- Around line 234-243: Update every uvx dpdata command in the examples,
including the multi and explicit type-map variants, to use the same tested
pinned dpdata version. Preserve all existing arguments and output paths while
applying the pin consistently.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 88b2b553-9617-45c5-959e-429a48846606

📥 Commits

Reviewing files that changed from the base of the PR and between f856a09 and 40f4bfd.

📒 Files selected for processing (1)
  • skills/dpdata-cli/SKILL.md

Comment thread skills/dpdata-cli/SKILL.md Outdated
#### Stress and Virial Conventions

- Stress can be **9-component** (3×3 flat) or **6-component** (Voigt order: xx yy zz yz xz xy)
- Conversion: `virial = −volume × stress` (ASE sign convention)

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🗄️ Data Integrity & Integration | 🟡 Minor | ⚡ Quick win

Document the stress sign as the default convention

The parser accepts a configurable stress_sign; -1 is only the default ASE convention. Calling virial = −volume × stress unconditionally could cause users with a non-default sign configuration to generate incorrect virials.

Suggested wording
-Conversion: `virial = −volume × stress` (ASE sign convention)
+Conversion by default: `virial = −volume × stress` (ASE sign convention; the sign can be configured)
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
- Conversion: `virial = −volume × stress` (ASE sign convention)
Conversion by default: `virial = −volume × stress` (ASE sign convention; the sign can be configured)
🧰 Tools
🪛 SkillSpector (2.3.11)

[warning] 20: [RP1] null: uvx/uv tool run commands without ==version create a rug-pull risk.

Remediation: Pin the version: uvx package-name==1.2.3

(MCP Rug Pull (RP1))


[warning] 51: [RP1] null: uvx/uv tool run commands without ==version create a rug-pull risk.

Remediation: Pin the version: uvx package-name==1.2.3

(MCP Rug Pull (RP1))


[warning] 57: [RP1] null: uvx/uv tool run commands without ==version create a rug-pull risk.

Remediation: Pin the version: uvx package-name==1.2.3

(MCP Rug Pull (RP1))


[warning] 63: [RP1] null: uvx/uv tool run commands without ==version create a rug-pull risk.

Remediation: Pin the version: uvx package-name==1.2.3

(MCP Rug Pull (RP1))


[warning] 69: [RP1] null: uvx/uv tool run commands without ==version create a rug-pull risk.

Remediation: Pin the version: uvx package-name==1.2.3

(MCP Rug Pull (RP1))


[warning] 75: [RP1] null: uvx/uv tool run commands without ==version create a rug-pull risk.

Remediation: Pin the version: uvx package-name==1.2.3

(MCP Rug Pull (RP1))


[warning] 81: [RP1] null: uvx/uv tool run commands without ==version create a rug-pull risk.

Remediation: Pin the version: uvx package-name==1.2.3

(MCP Rug Pull (RP1))


[warning] 234: [RP1] null: uvx/uv tool run commands without ==version create a rug-pull risk.

Remediation: Pin the version: uvx package-name==1.2.3

(MCP Rug Pull (RP1))


[warning] 237: [RP1] null: uvx/uv tool run commands without ==version create a rug-pull risk.

Remediation: Pin the version: uvx package-name==1.2.3

(MCP Rug Pull (RP1))


[warning] 240: [RP1] null: uvx/uv tool run commands without ==version create a rug-pull risk.

Remediation: Pin the version: uvx package-name==1.2.3

(MCP Rug Pull (RP1))


[warning] 243: [RP1] null: uvx/uv tool run commands without ==version create a rug-pull risk.

Remediation: Pin the version: uvx package-name==1.2.3

(MCP Rug Pull (RP1))


[warning] 35: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 101: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 117: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 149: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 151: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 153: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 154: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 155: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 156: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 157: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 158: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 159: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 162: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 163: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 164: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 166: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 167: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 168: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 169: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 170: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 171: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 172: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 173: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 174: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 38: [RA2] Session Persistence: Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Remediation: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.

(Rogue Agent (RA2))

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/dpdata-cli/SKILL.md` at line 227, Update the conversion documentation
to state that virial uses the configured stress_sign, with stress_sign = -1
representing the default ASE convention, rather than presenting virial = −volume
× stress as unconditional. Clarify that non-default stress_sign values alter the
conversion accordingly.

Comment on lines +234 to +243
uvx dpdata data.xyz -i extxyz -O deepmd_data -o deepmd/npy

# Heterogeneous extxyz (mixed compositions) → deepmd/npy/mixed
uvx dpdata data.xyz -i extxyz -O deepmd_data -o deepmd/npy/mixed --multi

# Convert extxyz to VASP POSCAR (first frame)
uvx dpdata data.xyz -i extxyz -O POSCAR -o vasp/poscar

# Convert with explicit type map
uvx dpdata data.xyz -i extxyz -O deepmd_data -o deepmd/npy -t H C N O

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔒 Security & Privacy | 🟡 Minor | ⚡ Quick win

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo '--- target file snippet ---'
nl -ba skills/dpdata-cli/SKILL.md | sed -n '220,255p'

echo
echo '--- search uvx dpdata ---'
rg -n --hidden --no-ignore-vcs -F 'uvx dpdata' skills . || true

echo
echo '--- search dpdata== ---'
rg -n --hidden --no-ignore-vcs -F 'dpdata==' skills . || true

echo
echo '--- search uvx examples in skills/dpdata-cli ---'
rg -n --hidden --no-ignore-vcs -F 'uvx ' skills/dpdata-cli || true

Repository: deepmodeling/dpdata

Length of output: 225


🏁 Script executed:

#!/bin/bash
set -euo pipefail
nl -ba skills/dpdata-cli/SKILL.md | sed -n '228,248p'

Repository: deepmodeling/dpdata

Length of output: 197


🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo '--- target file snippet ---'
sed -n '228,248p' skills/dpdata-cli/SKILL.md

echo
echo '--- search uvx dpdata ---'
grep -RIn --exclude-dir=.git -F 'uvx dpdata' skills . || true

echo
echo '--- search dpdata== ---'
grep -RIn --exclude-dir=.git -F 'dpdata==' skills . || true

echo
echo '--- search uvx examples in skills/dpdata-cli ---'
grep -RIn --exclude-dir=.git -F 'uvx ' skills/dpdata-cli || true

Repository: deepmodeling/dpdata

Length of output: 4174


🏁 Script executed:

#!/bin/bash
set -euo pipefail

printf '%s\n' '--- target file snippet ---'
sed -n '228,248p' skills/dpdata-cli/SKILL.md

printf '\n%s\n' '--- grep for exact command ---'
grep -RIn --exclude-dir=.git -F 'uvx dpdata data.xyz -i extxyz -O deepmd_data -o deepmd/npy' skills/dpdata-cli || true

printf '\n%s\n' '--- grep for version pinning patterns in this skill ---'
grep -RIn --exclude-dir=.git -E 'dpdata(@|==)' skills/dpdata-cli || true

Repository: deepmodeling/dpdata

Length of output: 1311


🏁 Script executed:

#!/bin/bash
set -euo pipefail

sed -n '228,248p' skills/dpdata-cli/SKILL.md
printf '\n---\n'
grep -RIn --exclude-dir=.git -F 'uvx dpdata' skills/dpdata-cli . || true
printf '\n---\n'
grep -RIn --exclude-dir=.git -E 'dpdata(@|==)' skills/dpdata-cli . || true

Repository: deepmodeling/dpdata

Length of output: 2959


🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo '--- skills/dpdata-cli/SKILL.md excerpt ---'
cat -n skills/dpdata-cli/SKILL.md | sed -n '228,248p'

echo
echo '--- exact matching lines ---'
grep -n -F 'uvx dpdata' skills/dpdata-cli/SKILL.md || true
grep -n -E 'dpdata(@|==)' skills/dpdata-cli/SKILL.md || true

Repository: deepmodeling/dpdata

Length of output: 1836


🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo '--- all uvx examples in skills/ ---'
grep -RIn --exclude-dir=.git -F 'uvx ' skills | head -n 80 || true

echo
echo '--- any pinned uvx package forms in skills/ ---'
grep -RIn --exclude-dir=.git -E 'uvx [^ ]+==|uvx [^ ]+@' skills | head -n 80 || true

Repository: deepmodeling/dpdata

Length of output: 1337


🌐 Web query:

uvx pin package version syntax documentation package==version reproducibility

💡 Result:

The uvx command, which is an alias for uv tool run, provides several methods for specifying package versions and managing tool environments. Version Syntax You can specify versions using the following syntax: 1. Exact version suffix: Append @ to the package name (e.g., uvx ruff@0.3.0). This supports only exact versions [1][2]. 2. The --from option: Allows more flexible specification, including version ranges or exact version pinning, using standard requirement syntax (e.g., uvx --from 'ruff==0.3.0' ruff or uvx --from 'ruff>0.2.0,<0.3.0' ruff) [1][3]. 3. Latest version: Use @latest to ensure the tool is run with the latest available version [1][4]. Reproducibility and Locking uvx is primarily designed for running ephemeral, isolated tools, and it does not natively support project-level lockfiles (like uv.lock) for these isolated environments [5][6][7]. This has significant implications for reproducibility: - Caching behavior: By default, uvx caches the environment created for a tool. Subsequent runs will reuse this cached environment [4][8]. However, the cache can be pruned or refreshed, which may lead to different versions being installed in the future [4][7]. - No inherent lockfile support: Because uvx does not read project-level configuration (like pyproject.toml or uv.lock), it does not automatically enforce locked dependency versions [5]. - Ensuring specific versions: To achieve higher reproducibility for a specific tool, it is recommended to use uv tool install @, which installs the tool into a dedicated tools directory. This creates a persistent environment that will not be automatically updated or cleared like the ephemeral environment used by uvx [7]. For complex dependencies that require strict locking, developers are encouraged to add the tool as a project dependency using uv add, which allows the use of uv.lock to guarantee reproducible environments [6][9]. As of July 2026, there are ongoing community discussions and proposals regarding mechanisms to better support embedded lockfiles or explicit lockfile usage with uvx [9][10].

Citations:


Pin the dpdata version in all uvx examples

These commands will otherwise track the latest release and can change behavior over time. Use a tested pin consistently, e.g. uvx dpdata@<tested-version> ... (or uvx --from 'dpdata==<tested-version>' dpdata ...).

🧰 Tools
🪛 SkillSpector (2.3.11)

[warning] 20: [RP1] null: uvx/uv tool run commands without ==version create a rug-pull risk.

Remediation: Pin the version: uvx package-name==1.2.3

(MCP Rug Pull (RP1))


[warning] 51: [RP1] null: uvx/uv tool run commands without ==version create a rug-pull risk.

Remediation: Pin the version: uvx package-name==1.2.3

(MCP Rug Pull (RP1))


[warning] 57: [RP1] null: uvx/uv tool run commands without ==version create a rug-pull risk.

Remediation: Pin the version: uvx package-name==1.2.3

(MCP Rug Pull (RP1))


[warning] 63: [RP1] null: uvx/uv tool run commands without ==version create a rug-pull risk.

Remediation: Pin the version: uvx package-name==1.2.3

(MCP Rug Pull (RP1))


[warning] 69: [RP1] null: uvx/uv tool run commands without ==version create a rug-pull risk.

Remediation: Pin the version: uvx package-name==1.2.3

(MCP Rug Pull (RP1))


[warning] 75: [RP1] null: uvx/uv tool run commands without ==version create a rug-pull risk.

Remediation: Pin the version: uvx package-name==1.2.3

(MCP Rug Pull (RP1))


[warning] 81: [RP1] null: uvx/uv tool run commands without ==version create a rug-pull risk.

Remediation: Pin the version: uvx package-name==1.2.3

(MCP Rug Pull (RP1))


[warning] 234: [RP1] null: uvx/uv tool run commands without ==version create a rug-pull risk.

Remediation: Pin the version: uvx package-name==1.2.3

(MCP Rug Pull (RP1))


[warning] 237: [RP1] null: uvx/uv tool run commands without ==version create a rug-pull risk.

Remediation: Pin the version: uvx package-name==1.2.3

(MCP Rug Pull (RP1))


[warning] 240: [RP1] null: uvx/uv tool run commands without ==version create a rug-pull risk.

Remediation: Pin the version: uvx package-name==1.2.3

(MCP Rug Pull (RP1))


[warning] 243: [RP1] null: uvx/uv tool run commands without ==version create a rug-pull risk.

Remediation: Pin the version: uvx package-name==1.2.3

(MCP Rug Pull (RP1))


[warning] 35: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 101: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 117: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 149: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 151: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 153: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 154: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 155: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 156: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 157: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 158: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 159: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 162: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 163: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 164: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 166: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 167: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 168: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 169: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 170: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 171: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 172: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 173: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 174: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 38: [RA2] Session Persistence: Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Remediation: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.

(Rogue Agent (RA2))

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/dpdata-cli/SKILL.md` around lines 234 - 243, Update every uvx dpdata
command in the examples, including the multi and explicit type-map variants, to
use the same tested pinned dpdata version. Preserve all existing arguments and
output paths while applying the pin consistently.

Source: Linters/SAST tools

- Add extxyz format aliases table (extxyz, quip/gap/xyz, mace/xyz, nequip/xyz, gpumd/xyz)
- Document file structure, recognized header keys, and Properties descriptor syntax
- Add CLI examples specific to extxyz (including --multi for heterogeneous data)
- Clarify xyz vs extxyz distinction to prevent common agent confusion
- Document stress/virial conversion conventions
@SchrodingersCattt
SchrodingersCattt force-pushed the docs/extxyz-skill-expansion branch from 40f4bfd to 67ec935 Compare July 17, 2026 04:10
@SchrodingersCattt
SchrodingersCattt force-pushed the docs/extxyz-skill-expansion branch from 27b77cc to 2c0bb43 Compare July 17, 2026 04:14

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@skills/dpdata-cli/SKILL.md`:
- Line 186: Revise the Important note in the XYZ format documentation to clarify
that plain xyz includes atom species/type tokens, while omitting extended
per-frame data such as energies, forces, cell information, and periodic boundary
conditions. Keep the distinction from extxyz and remove the implication that xyz
has no labels.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 88ad2925-296b-4b1a-a529-9d43b07fe71d

📥 Commits

Reviewing files that changed from the base of the PR and between 40f4bfd and 3782f44.

📒 Files selected for processing (1)
  • skills/dpdata-cli/SKILL.md

- `nequip/xyz` — NequIP model training data
- `gpumd/xyz` — GPUMD simulation data

> **Important:** Plain `xyz` is a **different**, simpler format that only stores coordinates without labels (energies/forces), cell information, or periodic boundary conditions. Do not confuse `xyz` with `extxyz`.

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🎯 Functional Correctness | 🟡 Minor | ⚡ Quick win

Clarify that plain xyz still contains atom species.

The plain XYZ reader extracts element/type tokens into atom_names and atom_types; what it does not provide is extended per-frame data such as energies, forces, cell information, or periodicity. Reword this to avoid implying that plain XYZ has no labels at all.

Suggested wording
-Plain `xyz` is a **different**, simpler format that only stores coordinates without labels (energies/forces), cell information, or periodic boundary conditions.
+Plain `xyz` is a **different**, simpler format that stores coordinates and atom species, but not extended labels such as energies/forces, cell information, or periodic boundary conditions.
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
> **Important:** Plain `xyz` is a **different**, simpler format that only stores coordinates without labels (energies/forces), cell information, or periodic boundary conditions. Do not confuse `xyz` with `extxyz`.
> **Important:** Plain `xyz` is a **different**, simpler format that stores coordinates and atom species, but not extended labels such as energies/forces, cell information, or periodic boundary conditions. Do not confuse `xyz` with `extxyz`.
🧰 Tools
🪛 SkillSpector (2.3.11)

[warning] 20: [RP1] null: uvx/uv tool run commands without ==version create a rug-pull risk.

Remediation: Pin the version: uvx package-name==1.2.3

(MCP Rug Pull (RP1))


[warning] 51: [RP1] null: uvx/uv tool run commands without ==version create a rug-pull risk.

Remediation: Pin the version: uvx package-name==1.2.3

(MCP Rug Pull (RP1))


[warning] 57: [RP1] null: uvx/uv tool run commands without ==version create a rug-pull risk.

Remediation: Pin the version: uvx package-name==1.2.3

(MCP Rug Pull (RP1))


[warning] 63: [RP1] null: uvx/uv tool run commands without ==version create a rug-pull risk.

Remediation: Pin the version: uvx package-name==1.2.3

(MCP Rug Pull (RP1))


[warning] 69: [RP1] null: uvx/uv tool run commands without ==version create a rug-pull risk.

Remediation: Pin the version: uvx package-name==1.2.3

(MCP Rug Pull (RP1))


[warning] 75: [RP1] null: uvx/uv tool run commands without ==version create a rug-pull risk.

Remediation: Pin the version: uvx package-name==1.2.3

(MCP Rug Pull (RP1))


[warning] 81: [RP1] null: uvx/uv tool run commands without ==version create a rug-pull risk.

Remediation: Pin the version: uvx package-name==1.2.3

(MCP Rug Pull (RP1))


[warning] 192: [RP1] null: uvx/uv tool run commands without ==version create a rug-pull risk.

Remediation: Pin the version: uvx package-name==1.2.3

(MCP Rug Pull (RP1))


[warning] 195: [RP1] null: uvx/uv tool run commands without ==version create a rug-pull risk.

Remediation: Pin the version: uvx package-name==1.2.3

(MCP Rug Pull (RP1))


[warning] 198: [RP1] null: uvx/uv tool run commands without ==version create a rug-pull risk.

Remediation: Pin the version: uvx package-name==1.2.3

(MCP Rug Pull (RP1))


[warning] 201: [RP1] null: uvx/uv tool run commands without ==version create a rug-pull risk.

Remediation: Pin the version: uvx package-name==1.2.3

(MCP Rug Pull (RP1))


[warning] 35: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 101: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 117: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 149: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 151: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 153: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 154: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 155: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 156: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 157: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 158: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 159: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 162: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 163: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 164: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 166: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 167: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 168: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 169: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 170: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 171: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 172: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 173: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 174: [MP2] Context Window Stuffing: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Remediation: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.

(Memory Poisoning (MP2))


[warning] 38: [RA2] Session Persistence: Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Remediation: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.

(Rogue Agent (RA2))

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/dpdata-cli/SKILL.md` at line 186, Revise the Important note in the XYZ
format documentation to clarify that plain xyz includes atom species/type
tokens, while omitting extended per-frame data such as energies, forces, cell
information, and periodic boundary conditions. Keep the distinction from extxyz
and remove the implication that xyz has no labels.

@codspeed-hq

codspeed-hq Bot commented Jul 17, 2026

Copy link
Copy Markdown

Merging this PR will improve performance by 10.47%

⚠️ Unknown Walltime execution environment detected

Using the Walltime instrument on standard Hosted Runners will lead to inconsistent data.

For the most accurate results, we recommend using CodSpeed Macro Runners: bare-metal machines fine-tuned for performance measurement consistency.

⚠️ Different runtime environments detected

Some benchmarks with significant performance changes were compared across different runtime environments,
which may affect the accuracy of the results.

Open the report in CodSpeed to investigate

⚡ 1 improved benchmark
✅ 1 untouched benchmark

Performance Changes

Mode Benchmark BASE HEAD Efficiency
WallTime test_import 12.4 ms 11.2 ms +10.47%

Tip

Curious why this is faster? Comment @codspeedbot explain why this is faster on this PR, or directly use the CodSpeed MCP with your agent.


Comparing SchrodingersCattt:docs/extxyz-skill-expansion (797223d) with master (f856a09)

Open in CodSpeed

@codecov

codecov Bot commented Jul 17, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 86.95%. Comparing base (f856a09) to head (797223d).

Additional details and impacted files
@@           Coverage Diff           @@
##           master    #1036   +/-   ##
=======================================
  Coverage   86.95%   86.95%           
=======================================
  Files          90       90           
  Lines        8330     8330           
=======================================
  Hits         7243     7243           
  Misses       1087     1087           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation dpdata size:M This PR changes 30-99 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant