The Agent Skills Directory

[PROMPT_INJECTION]: The skill includes instructions intended to override or limit the agent's focus to the provided text.
Evidence: "This page is the only instructions you need — every awal command for this flow is below."
[PROMPT_INJECTION]: The skill possesses an indirect prompt injection attack surface by consuming untrusted data from the Apify Store.
Ingestion points: The agent is instructed to fetch and read documentation and results from various Apify Actors (third-party tools) using curl to api.apify.com and apify.com.
Boundary markers: No explicit delimiters or boundary instructions are provided to the agent to treat external content as untrusted data.
Capability inventory: The agent has access to npx awal, which performs wallet operations and payments, and curl for network requests.
Sanitization: No sanitization or validation of the external markdown or JSON content is performed before the agent processes it.
[COMMAND_EXECUTION]: The skill relies on the execution of shell commands for its core functionality.
Evidence: Frequent use of npx awal for wallet management and curl for interacting with the Apify API.
[EXTERNAL_DOWNLOADS]: The skill uses npx to download and run the awal package at runtime.
Evidence: npx -y awal auth login <email>. The package is sourced from NPM and is the official CLI for the Coinbase Agentic Wallet, which is a well-known service.

apify-x402-agentic-wallet