The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill provides instructions to download and execute a shell script from https://downloads.diagrid.io/cli/install.sh by piping it directly to bash. This is the official installation method for the Diagrid CLI.
[EXTERNAL_DOWNLOADS]: Fetches the Diagrid CLI installer and potentially other resources from diagrid.io, which is the vendor's official domain.
[COMMAND_EXECUTION]: The diagrid dev run utility is used to execute arbitrary user-defined commands passed after the -- separator to start local processes.
[INDIRECT_PROMPT_INJECTION]: The skill establishes an attack surface by configuring tunnels that allow external services to call into local processes.
Ingestion points: Incoming service invocation requests, pub/sub messages, and MCP server traffic routed via Diagrid Catalyst tunnels to local ports.
Capability inventory: The skill can execute arbitrary local commands (diagrid dev run), manage process lifecycles, and access local environment variables.
Boundary markers: The instructions advise the agent to ask for user permission before installing the CLI, but there are no specific boundary markers or delimiters defined for the data arriving through the tunnel.
Sanitization: No sanitization or input validation for tunneled payloads is mentioned in the skill instructions, relying on the target application's logic.

catalyst-app-tunnels