The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes data from external web sources that could theoretically contain instructions intended to influence the agent's behavior.
Ingestion points: The agent retrieves content from docs.chainstack.com using the get_doc_page and search_docs tools, and reads pricing markdown from chainstack.com/pricing.md via the get_chainstack_pricing tool.
Boundary markers: There are no explicit instructions or delimiters provided to the agent to treat the fetched documentation or pricing data as untrusted content or to ignore any embedded commands.
Capability inventory: The agent has access to sensitive tools including create_node, delete_node, delete_project, and request_testnet_funds which perform state-changing operations on the user's infrastructure.
Sanitization: No specific sanitization or filtering steps are mentioned for the content retrieved from the documentation or pricing sources before it is interpreted by the agent.
[EXTERNAL_DOWNLOADS]: The skill recommends the installation of the @alchemy/cli package from the npm registry for users migrating from other providers. Alchemy is a recognized and well-known service provider in the blockchain industry.
[PERSISTENCE]: The instructions suggest that the agent guide users to store their CHAINSTACK_API_KEY in shell configuration files such as ~/.zshrc or ~/.bashrc. While this modifies persistence files, it is a documented recommendation for manual user configuration rather than an automated or hidden persistence mechanism by the agent.

chainstack