The Agent Skills Directory

[SAFE]: The skill is a legitimate developer tool for the Cargo platform, provided by the vendor getcargohq. It facilitates the management of infrastructure as code using the @cargo-ai/cli and @cargo-ai/cdk packages.
[INDIRECT_PROMPT_INJECTION]: The skill describes building agents and workflows that ingest data from external sources such as CRMs (HubSpot, Salesforce), recorded calls, and websites (via cookbooks like call-capture and web-capture). This creates a surface for indirect prompt injection where untrusted data could influence agent behavior.
Ingestion points: Data enters the system through defineModel (connector-sourced tables), defineFile (local documentation), and automated capture tools like call-capture and web-capture described in the cookbooks.
Boundary markers: The skill uses structured TypeScript definitions (defineWorkflow) and re-exported SDK functions to define agent logic, though it does not explicitly document input sanitization protocols for all ingestion points.
Capability inventory: Agents and workflows have access to powerful capabilities including writing to CRM systems, sending emails, performing web searches, and executing hosted code (workers and apps).
Sanitization: The skill provides rubric-based evaluators in defineAgent to assess performance, but primary protection against injection relies on the platform's underlying guardrails and the structured nature of the CDK logic.
[COMMAND_EXECUTION]: The skill instructions involve executing the cargo-ai CLI tool for project management tasks such as init, plan, deploy, and types. These commands are standard operations for the platform's IaC workflow and are executed locally by the user or within a controlled CI environment.
[EXTERNAL_DOWNLOADS]: The skill references and facilitates the installation of the vendor's official tools and resources, including @cargo-ai/cli from npm and worked examples from the getcargohq/gtm-skills repository on GitHub. These downloads originate from the verified vendor infrastructure.

cargo-project