The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill recommends installing the @coinbase/coinbase-cli package via npm. This is an official tool from the skill's author (Coinbase) and is necessary for the skill's functionality.
[COMMAND_EXECUTION]: The skill relies on executing shell commands via the Coinbase CLI. It includes several safety measures to mitigate risks, such as using COINBASE_NO_HISTORY=1 to prevent sensitive data from being saved in shell history, quoting shell arguments, and using JSON files for complex request bodies to avoid injection.
[INDIRECT_PROMPT_INJECTION]: The skill recognizes the risk of processing data from external API responses. It explicitly instructs the agent to treat all API results, provider content, and error text as untrusted data and strictly forbids interpreting such data as new instructions or prompts to change security settings.
[CREDENTIALS_UNSAFE]: The skill provides robust guidance on managing CDP API keys. It instructs the user to store keys in local files or secure OS keyrings and explicitly warns the agent never to ask the user to paste credentials into the chat or include them in logs.

coinbase-cli