The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes curl to perform network requests to legitimate Scandinavian transit API endpoints, including api.entur.io, api.resrobot.se, and www.rejseplanen.dk. These operations are directly related to the skill's stated purpose of searching transit schedules.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external transit APIs, which is an inherent surface for indirect prompt injection.\n
Ingestion points: Data is retrieved from external API responses (Entur, ResRobot, and Rejseplanen) into the agent's processing context.\n
Boundary markers: There are no explicit instructions for the agent to treat API responses as untrusted data using delimiters, though the provided examples show filtering results via jq.\n
Capability inventory: The skill's capabilities include network access (curl) and JSON parsing (jq). It does not include file system writes or arbitrary code execution.\n
Sanitization: API responses are filtered through jq to isolate specific JSON fields before they are displayed or processed by the agent, which significantly mitigates the risk of the agent executing embedded instructions.

scandinavia-transit