The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill utilizes npx to download and run the @useclawlink/cli package from the official NPM registry, which is a well-known and trusted service for package distribution.
[COMMAND_EXECUTION]: The skill uses shell commands to interact with the ClawLink CLI for user authentication (login), service connection (connect), and executing marketing actions (run). These are standard operations for a CLI-based integration.
[INDIRECT_PROMPT_INJECTION]: The skill reads external data such as lead lists and email content from Instantly, which presents a surface for indirect prompt injection.
Ingestion points: External data is ingested through actions like instantly_list_leads, instantly_list_emails, and instantly_list_campaigns as defined in SKILL.md.
Boundary markers: The documentation includes a safety instruction to "Reads first; confirm with the user before any write," which serves as a mitigation for unintended actions.
Capability inventory: The agent can perform campaign management, lead creation, and email retrieval via the @useclawlink/cli tool.
Sanitization: There is no explicit mention of data sanitization or filtering for the content retrieved from the Instantly API.

instantly