The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill installs the kleague-results npm package globally. This is a functional requirement to process sports data and aligns with the skill's stated purpose.
[COMMAND_EXECUTION]: The skill executes shell commands to perform a global npm installation (npm install -g) and runs a Node.js process to execute the core logic.
[REMOTE_CODE_EXECUTION]: The workflow uses dynamic import() within Node.js to load the installed package's source code at runtime from a computed file path.
[DATA_EXPOSURE]: The skill connects to official external endpoints at www.kleague.com to fetch match schedules and team rankings. This is a legitimate data retrieval operation for a sports results skill.
[PROMPT_INJECTION]: Indirect Prompt Injection Risk Assessment:
Ingestion points: Fetches JSON data from https://www.kleague.com/getScheduleList.do and https://www.kleague.com/record/teamRank.do (SKILL.md).
Boundary markers: None explicitly defined for the external JSON data.
Capability inventory: Subprocess execution via node and npm, and dynamic module loading via import() (SKILL.md).
Sanitization: Instructions specify data normalization for human readability, but do not explicitly detail security-focused sanitization of the retrieved JSON fields.

kleague-results