The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill fetches financial data in JSON and XLSX formats from official Argentine domains estadisticas.cafci.org.ar and api.pub.cafci.org.ar. It also utilizes defuddle.md as a proxy service to convert remote HTML content into Markdown.
[COMMAND_EXECUTION]: The instructions utilize standard system tools including curl, jq, and python3 for data retrieval and format conversion.
[DYNAMIC_EXECUTION]: The skill uses a Python one-liner (python3 -c) to parse HTML content. Although flagged by automated scanners due to the curl | python3 pattern, the executed code is a static script defined within the skill itself and does not execute instructions from the remote source.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data which could contain malicious instructions.
Ingestion points: Markdown converted by defuddle.md and HTML attributes from cafci.org.ar (Operation 5b and 6 in SKILL.md).
Boundary markers: Absent; external content is interpolated without explicit delimiters or warnings to the agent.
Capability inventory: The agent has access to shell commands (curl, jq, python3) and can write temporary files to /tmp (Setup section in SKILL.md).
Sanitization: Data is structured via jq filters and specific regex patterns in the Python parsing script, providing limited sanitization against command injection but not against natural language instruction injection.

cafci-fondos-comunes-argentina