The Agent Skills Directory

[DATA_EXPOSURE_AND_EXFILTRATION]: The skill communicates with appstore.fetcher.sh, which is the official service domain for the skill vendor. It properly instructs users to store sensitive API keys in environment variables rather than hardcoding them.
[INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided search terms (e.g., term, country) to construct API requests. While this represents a data ingestion surface, the risk is negligible as the data is used strictly as parameters for structured HTTP GET requests to a specific vendor endpoint.
[COMMAND_EXECUTION]: The provided documentation includes curl command examples for user reference. These are instructional templates and do not represent executable code or scripts that would run automatically without user oversight.

app-store