The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill manages the installation and update of the @circle-fin/cli package and associated skills from the vendor's catalog.
Evidence: npm install -g @circle-fin/cli, circle skill install, and npx skills update commands are used to maintain the toolset.
[COMMAND_EXECUTION]: The skill provides instructions for executing various Circle CLI commands to perform onchain operations.
Evidence: Commands include circle wallet transfer, circle wallet execute, and circle bridge transfer for managing blockchain state and funds.
[DATA_EXFILTRATION]: The skill includes functionality to submit feedback and telemetry to the vendor, which can include recent command history.
Evidence: The circle feedback submit command can include a JSON array of recent commands via the --recent-commands flag. However, the skill specifies that data is filtered for sensitive information locally and requires an active mainnet session.
[INDIRECT_PROMPT_INJECTION]: The skill processes dynamic data from the x402 marketplace and CLI help documentation, creating a potential surface for indirect prompt injection.
Ingestion points: Data enters the agent context through circle services search results and circle <command> --help output.
Boundary markers: The skill mitigates risks by mandating the use of the --output json flag for all commands where the agent must parse results.
Capability inventory: The agent has the ability to execute financial transactions (wallet transfer), interact with smart contracts (wallet execute), and install/update software (npm install, skill install).
Sanitization: The skill relies on local filtering for outgoing telemetry and structured JSON parsing for incoming command results to ensure data integrity.

use-circle-cli