The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The scripts/fetch_page.py utility retrieves content from external URLs to support SEO analysis. The script includes security controls such as a URL validator that blocks private, loopback, and reserved IP addresses, and it prevents the use of URLs with embedded credentials to mitigate SSRF and credential exposure risks.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted web content via fetch_page.py, creating a potential attack surface. This is mitigated through explicit directives in SKILL.md and references/skill-contract.md that instruct the agent to treat all external data as evidence only and to disregard any instructions found within that data.
[DYNAMIC_EXECUTION]: The scripts/citability_scorer.py script utilizes the __import__ function to load the standard sys library. This is a common Python pattern for accessing standard input and does not represent a security risk involving untrusted code loading or execution.

geo-compare