The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill uses bunx to download and run the algal-skills package from a public registry at runtime.
Evidence: The shell commands in SKILL.md invoke bunx algal-skills to perform bundling and triage operations.
[REMOTE_CODE_EXECUTION]: The use of bunx to execute an unversioned package (algal-skills) constitutes a remote code execution pattern, as it fetches and runs code from an external source without a fixed integrity check or version lock.
[INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest data from up to twelve external URLs or source objects, which provides a surface for indirect prompt injection.
Ingestion points: External URLs and source objects processed by the research-bundle command in SKILL.md.
Boundary markers: The description mentions that sources are "clipped independently" and failures are isolated, but it does not specify the use of delimiters or instructions to prevent the agent from obeying instructions embedded in the clipped content.
Capability inventory: The skill is explicitly allowed to use the exec tool and executes shell commands that interact with the local environment.
Sanitization: There is no evidence of sanitization or filtering applied to the remote content before it is bundled for the agent.

algal-research