The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes curl for API requests. It correctly demonstrates the use of --data-urlencode for the keyword parameter, which prevents command injection by ensuring user-provided stock symbols are treated as data rather than shell arguments.\n- [EXTERNAL_DOWNLOADS]: The skill connects to https://ai-news-search.moomoo.com to retrieve news data. This is an official domain for a well-known financial services provider and is considered a safe and intended external reference.\n- [DATA_EXFILTRATION]: No sensitive local data or credentials are accessed. The transmission of the user-specified stock symbol to the moomoo API is essential for the skill's primary function and follows the expected data flow.\n- [PROMPT_INJECTION]: The skill processes external news content which could theoretically contain malicious instructions (indirect prompt injection). 1. Ingestion points: News titles and URLs from the moomoo API. 2. Boundary markers: Uses a fixed template structure for the output. 3. Capability inventory: curl calls within SKILL.md. 4. Sanitization: Symbol input is URL-encoded in the API request to prevent parameter manipulation.

moomoo-stock-digest