The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill installs several Node.js packages from the NPM registry, including standard web frameworks like 'express' and specialized libraries for the x402 protocol such as '@x402/express', '@x402/core', '@x402/evm', '@x402/extensions', and '@coinbase/x402'. These are consistent with the skill's stated purpose of building a payment-enabled server.
[COMMAND_EXECUTION]: The skill uses the 'npx awal' tool to interact with the user's wallet (checking status and retrieving the payment address) and the 'node' command to run the generated server. These operations are performed locally and are necessary for the development workflow described.
[CREDENTIALS_UNSAFE]: The skill demonstrates safe credential management by instructing the user to use environment variables ('CDP_API_KEY_ID' and 'CDP_API_KEY_SECRET') for authentication with the Coinbase facilitator, rather than hardcoding them into the source code.
[INDIRECT_PROMPT_INJECTION]: The skill provides a template for an API endpoint that accepts POST requests ('/api/analyze'). While this represents an ingestion point for untrusted data, the example code serves as a boilerplate for a developer and does not include autonomous capabilities that could be exploited via the ingested text within the context of the skill itself.

monetize-service