The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The /seo flow sync command is designed to fetch updated prompt files and references from the author's official GitHub repository (github.com/AgriciDaniel/flow). These resources are hosted on a well-known service and belong to the skill's documented author.
[REMOTE_CODE_EXECUTION]: The sync functionality invokes a local script (sync_flow.py) that performs network requests to GitHub. While this executes a script that interacts with external data, it is a scoped operational task (updating the skill's own content) and does not involve executing arbitrary code from untrusted sources.
[INDIRECT_PROMPT_INJECTION]: The skill processes external data (URLs and topics provided by the user) to generate SEO deliverables. This creates a surface for indirect prompt injection if the ingested content contains malicious instructions. The skill mitigates this by instructing the agent to 'clearly label any assumption', 'use only the supplied inputs', and follow a highly structured output format that prioritizes evidence over generative text.

seo-flow