The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill directs the agent to fetch installation scripts and source code from an external repository located at github.com/coollabsio/cloudflare-cli.
[REMOTE_CODE_EXECUTION]: Installation instructions utilize a pattern where a remote shell script is downloaded via curl and immediately piped into a bash interpreter (curl | bash). This occurs for both global and user-level installations.
[COMMAND_EXECUTION]: The skill requires the agent to execute the cf CLI binary to perform DNS operations, which includes passing sensitive API tokens as command-line arguments.
[INDIRECT_PROMPT_INJECTION]: The skill provides capabilities to read and process DNS records (names, types, and comments) from external zones, creating an attack surface where record content could influence agent behavior.
Ingestion points: DNS record data retrieved via cf dns list and cf dns find (documented in SKILL.md).
Boundary markers: Absent; there are no instructions to treat the data returned by the CLI as untrusted or to ignore embedded natural language instructions.
Capability inventory: The skill utilizes shell execution for the cf binary across multiple management tasks (documented in SKILL.md).
Sanitization: Absent; the skill does not specify any validation or sanitization steps for the content of DNS records before they are processed by the agent.

cloudflare-cli