The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses the Bash tool to execute Python scripts (scripts/combined_query.py) that handle the logic for querying company data.\n- [EXTERNAL_DOWNLOADS]: The script scripts/base.py makes network requests to an external API endpoint defined by the QIBOOK_BASE_URL. It explicitly disables SSL certificate verification using verify=False, which is a security anti-pattern that makes the connection susceptible to man-in-the-middle attacks.\n- [INDIRECT_PROMPT_INJECTION]: The skill acts as a proxy for external API data, formatting it into Markdown for agent consumption. 1. Ingestion points: API responses in scripts/base.py. 2. Boundary markers: None. 3. Capability inventory: Access to Bash and Read tools. 4. Sanitization: The skill maps and translates fields but does not sanitize content against potential injection.\n- [DATA_EXFILTRATION]: The sensitive QIBOOK_ACCESS_KEY is transmitted to the configured QIBOOK_BASE_URL. The risk of key exposure is heightened by the lack of SSL verification in the transport layer.

qibook-company-profile