The Agent Skills Directory

[DATA_EXPOSURE]: The skill reads and writes sensitive Hiro API keys to the local filesystem at ~/.aibtc/config.json. The get-hiro-api-key subcommand includes logic to mask the key for console output, showing only the first and last four characters.
[INDIRECT_PROMPT_INJECTION]: The get-server-version command fetches JSON data from the npm registry to compare versions. The check-relay-health command fetches status information from a sponsor relay URL. These external outputs are returned to the agent context, creating a surface for processing external data.
[COMMAND_EXECUTION]: The skill is implemented as a Node.js CLI tool using the commander library to parse and execute specific subcommands for configuration management and diagnostics.

settings