The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The file evaluation-report.html contains self-referential content, including a 'TRACE 评测报告' with qualitative labels and scores (e.g., '良好 Good', 'Trust 4.20') that assess the skill's own performance metrics. 1. Ingestion points: evaluation-report.html. 2. Boundary markers: Absent. 3. Capability inventory: Provides instructions for Java authentication and session management. 4. Sanitization: Absent.
[CREDENTIALS_UNSAFE]: Documentation files references/at-check.md and references/config.md include hardcoded example credentials such as 'sa:123456' and a sample signature secret key 'kQwIOrYvnXmSDkwEiFngrKidMcdrgKor' for configuration tutorials.
[EXTERNAL_DOWNLOADS]: The evaluation-report.html file references external styling resources from the well-known Tailwind CSS CDN (https://cdn.tailwindcss.com).

sa-token