The Agent Skills Directory

Indirect Prompt Injection Surface: The skill includes patterns for processing external data from sources like emails (onEmail), webhooks (onRequest), and web scraping (browser_search). These ingestion points (noted in references/email.md and references/webhooks-push.md) lack explicit boundary markers in the provided examples, though they utilize capabilities like SQL storage, network requests, and dynamic code execution. Implementing validation and sanitization for these inputs is recommended.
Dynamic Execution Features: The skill documents experimental features such as 'Codemode' and browser tools (references/codemode.md and references/browse-the-web.md). These allow for the execution of generated JavaScript in isolated Worker or browser environments to orchestrate complex tool chains.
Resource Management: The skill provides instructions for installing official packages (e.g., agents, @cloudflare/ai-chat) and referencing documentation from the vendor's official domains.

agents-sdk