The Agent Skills Directory

[SAFE]: The skill provides documentation for the 'apideck-libraries' vendor connector. All network operations, such as those involving the Proxy API (unify.apideck.com), target official vendor infrastructure and well-known service domains.
[CREDENTIALS_UNSAFE]: The skill correctly demonstrates using environment variables (process.env.APIDECK_API_KEY) for secret management in its code examples, which is a standard security best practice. No hardcoded credentials were found.
[REMOTE_CODE_EXECUTION]: No remote code execution or suspicious package installation patterns were detected. The mentioned Node.js package (@apideck/unify) is an official library belonging to the vendor.
[OBFUSCATION]: The skill does not contain any obfuscated content, hidden characters, or homoglyph-based URL spoofing.
[INDIRECT_PROMPT_INJECTION]: While the skill describes methods for reading external data (employees, payroll, etc.) from Acerta, it serves as a documentation reference rather than an executable data processing pipeline. No specific vulnerabilities related to untrusted data ingestion were identified in the instructions.

acerta