The Agent Skills Directory

[SAFE]: The skill instructions and scripts use the official icp CLI and interface with established DFINITY Foundation infrastructure (CyclePay gateway) for resource management. All external resources, including the Stripe payment domain and CyclePay canisters, are well-known and appropriate for the skill's intended purpose.
[INDIRECT_PROMPT_INJECTION]: The skill includes instructions to parse output from the icp tool and canister queries to retrieve payment URLs and order status. This represents a potential attack surface for indirect prompt injection if the tool output were compromised. However, the skill implements strong mitigations by instructing the agent to relay the URL verbatim to the user without attempting to automate the interaction or process the contents further. This human-in-the-loop requirement effectively neutralizes the risk.
[COMMAND_EXECUTION]: The skill uses standard command-line operations for project deployment and resource management. The commands are transparent, documented, and specific to the identity and project scope defined by the user. No suspicious command concatenation, privilege escalation, or persistence mechanisms are present.
[DATA_EXPOSURE_&_EXFILTRATION]: The skill explicitly warns against collecting or storing credit card details, directing the agent to ensure all payment information is entered only on the hosted Stripe page. It emphasizes that card details never touch the CLI or the canister backend, following security best practices for handling sensitive financial data.

buy-cycles