The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill uses curl to fetch content from api.nasa.gov. As this is an official domain of NASA (a well-known government organization), this is considered a safe and intended use of external data.
[CREDENTIALS_UNSAFE]: The skill includes DEMO_KEY in the example API URLs. This is a public, rate-limited key provided by NASA for development and testing, and does not represent a sensitive credential or secret exposure.
[COMMAND_EXECUTION]: The skill provides example curl commands. These are limited to GET requests against a specific, trusted API endpoint for retrieving images and metadata.
[INDIRECT_PROMPT_INJECTION]: The skill processes external data (titles and explanations from NASA). While this is an ingestion point for untrusted data, the risk is negligible as it is read-only and targets a highly reputable source.

nasa-apod