The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill provides instructions to download and execute shell and PowerShell scripts from the vendor's repository to install the required CLI tool. Evidence includes the use of curl -fsSL https://raw.githubusercontent.com/FutunnOpen/futu-cli/main/scripts/install.sh | sh and powershell -ExecutionPolicy Bypass -File .\install.ps1 in SKILL.md. These scripts are hosted on the author's own GitHub repository and the instructions require the agent to obtain explicit user consent before proceeding.
[COMMAND_EXECUTION]: The skill leverages the Bash tool to run CLI commands that perform sensitive actions such as querying account balances and placing crypto orders. Evidence includes extensive use of futu crypto order place, futu crypto balance, and related commands throughout the skill and its references.
[INDIRECT_PROMPT_INJECTION]: The skill processes data returned by the CLI tool, creating a potential vector for instructions embedded in external data to influence the agent. Ingestion points include data returned from commands like futu auth status, futu crypto account list, and various trading query commands. Boundary markers: the skill mandates the use of --format json for structured output but does not define explicit text delimiters to isolate tool output from the agent's internal reasoning. Capability inventory: the skill has the ability to execute shell commands for financial transactions and account management. Sanitization: the skill includes logic to validate account IDs and parameter sets, but does not specify explicit sanitization or escaping of string data received from the CLI output.
[EXTERNAL_DOWNLOADS]: The skill downloads an installation script for Windows using iwr -UseBasicParsing https://raw.githubusercontent.com/FutunnOpen/futu-cli/main/scripts/install.ps1 -OutFile install.ps1.

futu-crypto