The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill is configured to fetch documentation files (.txt) from https://cds.coinbase.com/llms/. This is a legitimate use case for a documentation skill, and the domain is the official site for the Coinbase Design System.
[COMMAND_EXECUTION]: The skill uses the curl command to retrieve documentation. This execution is limited to fetching text-based documentation from a trusted vendor domain and does not involve executing remote scripts or piping data to a shell.
[INDIRECT_PROMPT_INJECTION]: The skill ingests external data from the CDS documentation site. While the skill does not explicitly define boundary markers for this content, the risk is negligible as the data source is the vendor's own documentation, and the agent uses it solely for grounding its reasoning and code generation.
[SAFE]: No evidence of prompt injection, obfuscation, data exfiltration, or persistence mechanisms was found. The skill follows best practices for a documentation retrieval tool within a controlled design system environment.

cds-docs