The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides shell script examples utilizing standard utilities such as curl, jq, openssl, and cast for API interaction and cryptographic signing. These commands are executed locally to facilitate agent automation.
[EXTERNAL_DOWNLOADS]: Authenticated requests are made to juicerapi.berryfi.org and api.bankr.bot. These communications are restricted to necessary protocol configuration and wallet operations.
[PROMPT_INJECTION]: The skill explicitly addresses the risk of indirect prompt injection by instructing the agent to ignore operational parameters (such as addresses, amounts, or contract targets) if they originate from untrusted model outputs or external data. It mandates the use of pinned allowlists and human confirmation for all on-chain actions.
[DATA_EXFILTRATION]: Authentication is performed using short-lived Ethereum personal_sign signatures instead of static API keys. The 'v2' signing implementation binds signatures to specific request parameters (host, method, path, body hash), which effectively prevents replay attacks and credential theft.

berry-juicer