The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill installs the clawhub CLI tool from the public npm registry and subsequently downloads skill packages from the vendor's registry at clawhub.com.
[COMMAND_EXECUTION]: The skill uses subprocess calls to execute clawhub CLI commands for logging in, searching, installing, and publishing skills.
[INDIRECT_PROMPT_INJECTION]: The skill facilitates the download and integration of third-party instructions (skills) which could potentially contain malicious prompts.
Ingestion points: External skills are ingested via clawhub install and clawhub update commands referenced in SKILL.md.
Boundary markers: No specific boundary markers or 'ignore' instructions are defined for the content downloaded from the registry.
Capability inventory: The tool possesses the ability to execute shell commands, manage local file directories (./skills), and perform network operations via the CLI.
Sanitization: The instructions do not describe automated validation or sanitization of the logic contained within downloaded skills.

clawhub