The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs the user or agent to download and install the better-icons package from the public NPM registry using npm install or bun add. It also utilizes npx and bunx for remote code execution.
[COMMAND_EXECUTION]: Provides several tools that execute shell commands to search for and retrieve icons. The better-icons setup command installs services on the local system.
[PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes untrusted data from an external API (Iconify) and has high-privilege capabilities.
Ingestion points: Data enters the agent's context through the search_icons, list_collections, and recommend_icons tools, which fetch results from https://api.iconify.design.
Boundary markers: The instructions lack delimiters or system warnings to ignore embedded instructions within the icon metadata or search results.
Capability inventory: The SyncIcon tool (SKILL.md) allows the agent to write to arbitrary absolute file paths (icons_file), and the better-icons setup tool can modify project or global configurations.
Sanitization: There is no evidence of validation or sanitization of the icon IDs or file paths before they are used in file-system operations.

better-icons