The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill provides commands to download the nacos-cli installer from the official project website at nacos.io. These scripts are fetched using curl and iwr.
[REMOTE_CODE_EXECUTION]: The installation process for the nacos-cli tool involves piping a remote shell script directly into bash or executing a downloaded PowerShell script. This is the standard installation method for the official Nacos toolset.
[COMMAND_EXECUTION]: The skill makes extensive use of local shell commands to perform its tasks, including which, mkdir, cat, find, and cp, alongside the nacos-cli utility itself.
[PRIVILEGE_ESCALATION]: The Linux/macOS installation command for the nacos-cli requires sudo privileges to execute the installer script, which is necessary for system-wide installation.
[INDIRECT_PROMPT_INJECTION]: The skill possesses a vulnerability surface for indirect prompt injection as it ingests and processes untrusted data from Nacos registries.
Ingestion points: Skill metadata and instructions are retrieved via nacos-cli skill-list and nacos-cli skill-get (files like SKILL.md and _meta.json).
Boundary markers: No explicit delimiters or instructions to ignore embedded commands are used when processing retrieved skill content.
Capability inventory: The skill can execute shell commands, perform file system operations (create, copy, write), and initiate network requests via nacos-cli and curl.
Sanitization: There is no evidence of sanitization or validation of the content retrieved from the remote registry before it is presented to or processed by the agent.
[DYNAMIC_EXECUTION]: The skill uses a python3 one-liner to parse and extract timestamp data from a local JSON metadata file during the skill update workflow.

nacos-skill-registry