The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill provides instructions for installing a CLI tool via npx -y @coldiq/mcp@latest. This is a documented method for a user to connect a specific vendor's service (ColdIQ) and aligns with the skill's stated purpose of technology signal tracking.
[COMMAND_EXECUTION]: The skill includes a command line example COLDIQ_API_KEY=<key> npx -y @coldiq/mcp@latest. This command is presented as an instruction for the user to execute manually to connect their own API key, rather than a hidden or automated background execution.
[REMOTE_CODE_EXECUTION]: The use of npx to download and run the latest version of @coldiq/mcp is a standard way to use Node.js packages. Given the context of the skill authoring and the service provided, this is a legitimate integration step.
[DATA_EXPOSURE_AND_EXFILTRATION]: The skill references an API at https://api.coldiq.com. This is the official endpoint for the vendor mentioned in the skill and is used for its primary function of fetching technographic data. No unauthorized data exfiltration patterns were found.

tech-changes