The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill identifies DuckDB as a required dependency for performing SQL analysis on exported activity data. It provides standard instructions for installing the duckdb NPM package and its associated build-essential/toolchain prerequisites.
[INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion and analysis of activity logs generated by CARTO platform users. This represents an attack surface where malicious input in logs could attempt to influence agent behavior, although the risk is mitigated by the use of structured SQL queries and the administrative context.
Ingestion points: Parquet files containing exported activity logs are processed via carto activity query as described in references/activity-troubleshooting.md.
Boundary markers: The instructions do not specify the use of delimiters or specific protection against prompt injection within the processed log data.
Capability inventory: The skill includes high-privilege administrative tools such as carto users delete, carto admin batch-delete, and carto admin transfer for managing organization resources.
Sanitization: There is no documentation regarding the sanitization or escaping of log data fields (like map names or user emails) before they are processed by the agent.

carto-manage-platform