The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs the agent to download and run the @useclawlink/cli package from the NPM registry. This is a vendor-provided tool used to bridge the agent with the Postiz service.
[COMMAND_EXECUTION]: The skill relies on shell commands (npx @useclawlink/cli) to authenticate, list actions, and execute social media operations. This is the intended primary mechanism of the skill.
[INDIRECT_PROMPT_INJECTION]: The skill interacts with external social media data, which introduces a potential attack surface where data retrieved from Postiz could contain instructions intended to influence the agent's behavior.
Ingestion points: SKILL.md indicates the agent retrieves integration lists, posting schemas, and social media content via tools like postiz_mcp_integrationlist and postiz_mcp_ask_postiz.
Boundary markers: The instructions do not specify explicit delimiters or warnings to ignore embedded instructions in the retrieved data.
Capability inventory: The skill can execute shell commands and perform network operations through the ClawLink CLI.
Sanitization: There is no mention of specific sanitization or filtering logic applied to data fetched from social media platforms.

postiz