The Agent Skills Directory

[DATA_EXFILTRATION]: The scripts scripts/configure-keyapi-auth.mjs and scripts/keyapi-api.mjs read and write to sensitive shell configuration files such as .bashrc, .zshrc, .bash_profile, and .profile located in the user's home directory. This is used to manage the KEYAPI_TOKEN environment variable.
[COMMAND_EXECUTION]: The skill performs automated modification of system shell profiles in scripts/configure-keyapi-auth.mjs. This establishes a persistence mechanism by ensuring that environment variables are automatically loaded in every new shell session.
[EXTERNAL_DOWNLOADS]: The skill downloads content from https://docs.keyapi.ai and makes API requests to https://api.keyapi.ai. These external sources are not recognized as pre-verified trusted services or organizations.
[PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection via the ingestion of untrusted external data.
Ingestion points: Documentation index at https://docs.keyapi.ai/llms.txt and specific endpoint pages; API responses from https://api.keyapi.ai.
Boundary markers: The skill does not implement delimiters or safety instructions to distinguish external data from instructions when processing these inputs.
Capability inventory: The agent has access to file system operations (read/write), network connectivity, and script execution.
Sanitization: No data validation or sanitization is performed on the ingested content before it is processed by the agent.

keyapi-reddit