The Agent Skills Directory

[DATA_EXPOSURE_AND_EXFILTRATION]: The script scripts/search_pubmed.py performs network requests to https://eutils.ncbi.nlm.nih.gov. This is the official API for PubMed, an established scientific service. No sensitive local data is accessed or transmitted; the operations are limited to search queries and public metadata retrieval.
[INDIRECT_PROMPT_INJECTION]: The skill has a data ingestion surface through scripts/search_pubmed.py, which fetches and parses external article titles from the PubMed API. While this data is untrusted, the script uses safe JSON parsing and standard URL encoding for parameters. The risk of indirect prompt injection is minimal and consistent with the tool's intended purpose as a search utility.

search-pubmed