The Agent Skills Directory

[COMMAND_EXECUTION]: The skill includes a wrapper script scripts/cardano-cli.sh that facilitates the execution of Cardano CLI commands either locally or within a Docker container. The script uses an array-based exec to pass arguments, which is a standard pattern for CLI wrappers.
[EXTERNAL_DOWNLOADS]: The Docker wrapper script fetches the official Cardano node image from ghcr.io/intersectmbo/cardano-node. This is the official repository for the Cardano ecosystem's governance organization and is considered a well-known service for this domain.
[PRIVILEGE_ESCALATION]: The instructions suggest applying chmod +x to the included scripts/cardano-cli.sh utility. This is a standard and expected practice for local development tools and does not constitute a malicious privilege escalation attempt.
[INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied data such as Pool IDs and UTXOs into command templates. While this creates a surface for argument injection if the agent executes these commands without validation, the skill explicitly instructs the agent to only provide templates and never to execute them directly, relying on a separate operator skill for execution.

cardano-cli-staking