The Agent Skills Directory

[COMMAND_EXECUTION]: Several scripts in the skill automatically invoke the system package manager to install dependencies if they are missing. Evidence: scripts/audit-geo.py, scripts/check-hedge-density.py, and scripts/generate-agentfacts.py all contain code blocks using subprocess.check_call([sys.executable, "-m", "pip", "install", ...]) to install requests and beautifulsoup4 at runtime.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external, potentially untrusted URLs, which creates a surface for indirect prompt injection. 1. Ingestion points: The fetch_content method in scripts/audit-geo.py and fetch_text_from_url in scripts/check-hedge-density.py download content from user-specified URLs. 2. Boundary markers: There are no explicit delimiters or instructions provided to the agent to ignore instructions embedded within the fetched content. 3. Capability inventory: The skill utilizes requests for network operations and subprocess for command execution (pip installation). 4. Sanitization: While BeautifulSoup is used to remove HTML tags, the resulting text content is analyzed for patterns (hedge density) without filtering for malicious instructions.
[EXTERNAL_DOWNLOADS]: The skill performs network requests to fetch external website content for auditing purposes and to download packages from the Python Package Index (PyPI).

geo-optimizer