The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes several command-line tools such as pip, apt, curl, cowsay, and boxes to install and run ASCII art utilities. These operations are standard and appropriate for the skill's primary function.
[EXTERNAL_DOWNLOADS]: The skill interacts with multiple external services to fetch art and tools, including the asciified.thelicato.io API, curated art from ascii.co.uk, GitHub's Octocat API, and community services such as qrenco.de and wttr.in. It also provides instructions for installing the ascii-image-converter tool from a public GitHub repository.
[PRIVILEGE_ESCALATION]: The skill contains instructions to use sudo apt install for installing system packages like cowsay, boxes, and toilet. While this involves elevated permissions, it is the standard administrative method for tool installation on Linux distributions.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from ascii.co.uk, which creates a potential surface for indirect prompt injection. * Ingestion points: HTML content is downloaded from the external site into the /tmp directory. * Boundary markers: None present to distinguish data from instructions. * Capability inventory: The agent has access to shell and Python execution environments. * Sanitization: The skill uses a Python regex script to clean HTML tags and unescape characters, which provides basic structural filtering but does not filter for semantic instructions.

ascii-art