The Agent Skills Directory

[DATA_EXFILTRATION]: The skill facilitates the integration of a specific SMS service via the push.spug.cc domain. It includes explicit security constraints to prevent sensitive data leakage, such as instructing the agent to store API tokens and template codes in environment variables or project-specific secret management systems rather than hardcoding them into source code or logs. Furthermore, it mandates that full URLs containing sensitive parameters (like phone numbers or verification codes) must not be recorded in logs.
[INDIRECT_PROMPT_INJECTION]: The skill defines a clear ingestion surface for user-supplied data, such as phone numbers and names, which are interpolated into API requests. To mitigate injection risks, the skill requires strict validation of these inputs, specifying exact character counts and allowed character types (e.g., 11-digit numbers for phones, specific ranges for codes) to ensure sanitization before data is transmitted to the external API.

spug-sms