The Agent Skills Directory

[DATA_EXFILTRATION]: The skill uses curl to retrieve weather data from a user-specified proxy server (KSKILL_PROXY_BASE_URL). This is the intended behavior for fetching weather information from the KMA API.
[PROMPT_INJECTION]: Indirect Prompt Injection Surface. The skill processes and summarizes data from an external API response. 1. Ingestion points: External JSON data is fetched from the proxy endpoint specified in SKILL.md. 2. Boundary markers: No delimiters are used to separate external content from the agent's instructions. 3. Capability inventory: The skill utilizes curl for network read operations in SKILL.md. 4. Sanitization: The skill provides specific instructions to summarize only certain weather categories (TMP, SKY, PTY, etc.), which reduces the risk of the agent interpreting unexpected fields as commands.

korea-weather