The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted data from X/Twitter and Reddit, which creates a potential surface for indirect prompt injection attacks.
Ingestion points: Data enters the agent's context through the /api/agent/scout/x and /api/agent/scout/reddit API endpoints.
Boundary markers: The instructions do not specify the use of delimiters or warnings to prevent the agent from following instructions potentially embedded in social media posts.
Capability inventory: The skill is configured to perform network requests (HTTPS) to the vendor's API but does not show evidence of broader system capabilities like file system modification.
Sanitization: There is no evidence of sanitization, filtering, or escaping of the ingested social media content before it is processed by the agent.
[EXTERNAL_DOWNLOADS]: The skill instructions direct the user to download code and packages from external sources during the installation phase.
The README provides instructions to git clone from a GitHub repository and use npx openskills to install the plugin.
These resources are hosted on platforms associated with the skill's author/vendor.
[COMMAND_EXECUTION]: The documentation includes shell commands intended for the user or agent environment to set up the skill.
Examples include git clone for repository retrieval and npx openskills install for package management.

citedy-trend-scout