The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill references an external GitHub Action from a third-party repository not included in the trusted vendors list.
Evidence: geekyeggo/delete-artifact@v2 is referenced in the artifact retention policy workflow within references/npm-package-publishing.md.
[INDIRECT_PROMPT_INJECTION]: The artifact-version.sh reference script provided in the documentation contains a command injection vulnerability due to unsafe handling of external file content.
Ingestion points: The script reads the version field from a package.json file using grep and sed in references/npm-package-publishing.md.
Boundary markers: None. The script does not utilize delimiters or instructions to ignore embedded commands in the parsed data.
Capability inventory: The script has the capability to execute shell commands, specifically docker build and docker tag.
Sanitization: None. The extracted version string is interpolated directly into shell commands without validation or escaping.
Evidence: A malicious package.json with a version field like 1.0.0\" $(touch /tmp/pwned) \" could trigger arbitrary command execution when docker build -t myapp:${FULL_VERSION} . is called.

artifact-management