The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using the awal CLI tool to perform payments and fetch data from the PubMed Trends API.
Evidence: Multiple endpoint examples in SKILL.md use the awal x402 pay command format to interact with the service.
[EXTERNAL_DOWNLOADS]: The skill performs network requests to an external, non-whitelisted domain to retrieve publication analytics and paper metadata.
Evidence: All primary functionality is hosted at https://pubmed.sekgen.xyz, as documented throughout SKILL.md.
[PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and processes untrusted data from an external API without sufficient security boundaries.
Ingestion points: Data returned from API endpoints such as /api/v1/digest and /api/v1/keypapers (referenced in SKILL.md).
Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the skill's handling of API responses.
Capability inventory: The agent has the capability to execute shell commands (awal) and read the resulting output into its context.
Sanitization: No evidence of sanitization or validation of the remote API's response content is provided.

pubmed-trends