The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The file jingswap.ts contains a hardcoded API key assigned to the JINGSWAP_API_KEY constant as a fallback value (jc_b058d7f2e0976bd4ee34be3e5c7ba7ebe45289c55d3f5e45f666ebc14b7ebfd0). This key is used for authentication in the x-api-key header for all requests to the backend API.
[EXTERNAL_DOWNLOADS]: The skill performs network requests to faktory-dao-backend.vercel.app to fetch auction state, depositor data, and Pyth oracle VAAs. These requests are directed to a service hosted on a well-known platform.
[INDIRECT_PROMPT_INJECTION]: The agent's decision-making logic for executing blockchain transactions (such as deposits and settlements) is directly dependent on data ingested from an external API.
Ingestion points: Subcommands in jingswap.ts (e.g., cycle-state, prices) fetch JSON data from the backend and print it to the agent's context.
Boundary markers: The external JSON data is printed to the agent without boundary markers or safety instructions to distinguish it from trusted instructions.
Capability inventory: The skill provides tools for executing financial transactions on the Stacks blockchain, including deposit-stx, deposit-sbtc, close-deposits, and settle.
Sanitization: There is no sanitization or validation performed on the API responses before they are processed by the agent.

jingswap