The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill uses npx awal@latest which downloads and executes the latest version of the awal package from the npm registry at runtime.- [COMMAND_EXECUTION]: The skill executes shell commands (npx awal ...) to perform status checks and trades, which is the primary mechanism of the skill. The execution is restricted via the allowed-tools frontmatter.- [INDIRECT_PROMPT_INJECTION]: The skill provides a surface for indirect prompt injection as it interpolates user-controlled inputs (amount, from, to) into bash commands.
Ingestion points: amount, from, and to arguments provided by the user or agent based on natural language requests.
Boundary markers: The skill includes a warning to single-quote amounts containing $ to prevent shell expansion, but lacks comprehensive boundary delimiters for all input fields.
Capability inventory: The skill utilizes the Bash tool to execute npx commands which interact with blockchain networks and external APIs.
Sanitization: Instructions advise using single quotes for certain inputs to prevent shell expansion, but there is no programmatic validation or escaping described within the skill instructions.

trade