The Agent Skills Directory

[DATA_EXFILTRATION]: The skill initiates network connections to mcp.datadoe.com to fetch reporting data. This domain is not on the provided whitelist, creating a technical exfiltration surface for data retrieved by the agent. \n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from Amazon reports, creating a vulnerability surface. \n * Ingestion points: The skill retrieves data from the amazon_profit_by_sku_and_date table via the exports_create MCP tool. \n * Boundary markers: No specific delimiters are defined to isolate external data from the agent's instructions. \n * Capability inventory: The skill is capable of data aggregation, mathematical calculation, and report generation. \n * Sanitization: No explicit sanitization or escaping is performed on external strings like product names or SKUs. \n- [DYNAMIC_EXECUTION]: The agent is instructed to aggregate and calculate metrics "in code," which involves the runtime generation and execution of data processing logic based on the retrieved datasets. \n- [METADATA_POISONING]: The author name in the metadata (DataDoe) is inconsistent with the publishing account owner (deltologic), which may be misleading regarding the tool's origin.

sales-movers-scanner