The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill requires the installation of the 'omniroute' package from the official npm registry (npm install -g omniroute). While this is a standard delivery method for CLI tools, it introduces an external dependency into the environment.
[COMMAND_EXECUTION]: The skill operates by executing the omniroute CLI and various subcommands (e.g., compression status, compression configure, compression preview) to manage prompt compression settings.
[INDIRECT_PROMPT_INJECTION]: The skill includes functionality to preview compression output using 'real prompts' and to add custom replacement rules. This creates a surface where malicious instructions embedded in the prompts or rules could be interpreted by the agent during the preview process.
Ingestion points: The compression preview command in SKILL.md accepts external prompt text, and the compression add --replacement <r> command accepts user-defined strings.
Boundary markers: The instructions do not specify any delimiters or safety markers to differentiate between the data being compressed and instructions to the agent.
Capability inventory: The skill has the ability to execute shell commands and modify compression configurations via the omniroute CLI.
Sanitization: There is no evidence of sanitization, filtering, or escaping for the data passed into the compression engine or preview subcommands.

cli-compression