The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill requires the installation of official Node.js packages provided by the vendor, specifically @circle-fin/smart-contract-platform and @circle-fin/developer-controlled-wallets, to facilitate API communication.
[INDIRECT_PROMPT_INJECTION]: The skill manages and processes untrusted data from external sources including smart contract ABIs, constructor parameters, and blockchain event logs.
Ingestion points: abiJson, abiFunctionSignature, and abiParameters fields used in SKILL.md and throughout the reference files; eventLogs and webhook notifications retrieved in references/monitor-events.md.
Boundary markers: None explicitly defined in the provided code snippets to distinguish between instructions and external data.
Capability inventory: The skill has the capability to execute blockchain transactions and query contract state using the developer-controlled wallets and SCP clients.
Sanitization: The skill's documentation includes explicit security rules requiring validation of all inputs (addresses, amounts, chain IDs) and human confirmation for mainnet transactions, which serves as a mitigation strategy.
[CREDENTIALS_UNSAFE]: The skill correctly identifies the need for CIRCLE_API_KEY and ENTITY_SECRET and provides instructions to manage them using environment variables. It includes strict security rules prohibiting the hardcoding, committing, or logging of these credentials.

use-smart-contract-platform