The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill uses npx -y awal to download and execute the Coinbase Agentic Wallet CLI from the NPM registry. This is a remote package download from a well-known service (NPM) and involves a tool from a well-known organization (Coinbase).
[COMMAND_EXECUTION]: The agent is instructed to run shell commands including npx awal for crypto wallet operations and curl for interacting with the Apify API and fetching markdown documentation. These commands are necessary for the skill's primary function.
[DATA_EXPOSURE]: The skill directs the agent to prompt the user for their email address and a verification code to authenticate the wallet. It also manages a temporary Apify API token ($TOKEN) and includes explicit instructions for the agent not to print or persist this credential.
[PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it is designed to ingest and process data from external Apify Actors (web scrapers) and their documentation. 1. Ingestion points: Markdown documentation and JSON dataset items returned from apify.com and api.apify.com. 2. Boundary markers: The instructions lack explicit delimiters or specific warnings to ignore embedded instructions within the scraped content. 3. Capability inventory: The agent has the ability to execute crypto transactions via awal and make further network requests based on analyzed data. 4. Sanitization: No specific filtering or sanitization steps are mentioned for the incoming third-party data.

apify-x402-agentic-wallet