The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill provides an installation command for the airbyte-agent CLI using curl -fsSL https://airbyte.ai/install.sh | bash. This executes a script from the vendor's official domain directly in the shell. While this is a standard installation pattern for the service, it involves the execution of remote code.\n- [COMMAND_EXECUTION]: The skill relies on executing the airbyte-agent CLI to perform management tasks. It also modifies the local configuration file at ~/.airbyte-agent/settings.json when setting a default workspace via the workspaces use command.\n- [DATA_EXFILTRATION]: The skill's core functionality is to read data from external SaaS products (e.g., Salesforce, HubSpot) through Airbyte connectors and ingest it into the agent's context, which constitutes the movement of external data into the local environment.\n- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface because it processes data fetched from external, potentially untrusted SaaS sources.\n
Ingestion points: Data returned from airbyte-agent connectors execute operations.\n
Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded prompts within the external content.\n
Capability inventory: The skill can perform write actions, delete connectors, and modify local configuration files.\n
Sanitization: There is no mention of validating or escaping retrieved data before it is processed by the agent.

airbyte-agent