The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses the Bash tool to execute a local Python script (scripts/community_signals.py) which handles the data collection and processing logic.
[EXTERNAL_DOWNLOADS]: The Python script performs network operations to fetch data from well-known services, specifically the Hacker News Algolia API (hn.algolia.com) and the Apify API (api.apify.com). These connections are necessary for the skill's primary function of scanning community forums.
[CREDENTIALS_UNSAFE]: The skill requires an Apify API token for Reddit scraping and correctly advises the user to store it in a .env file, which is a standard and recommended security practice for local development tools.
[PROMPT_INJECTION]: The skill processes untrusted content from public forums. While there is a potential surface for indirect prompt injection if malicious instructions are embedded in forum posts, the risk is inherent to the tool's purpose of analyzing external data, and basic sanitization (HTML cleaning) is performed on the input text.

community-signals