The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The fetch_openapi_spec.py script downloads the official Etsy OpenAPI specification from the vendor's website. This is an expected operation for an API-focused skill and targets a trusted service domain (etsy.com).
[COMMAND_EXECUTION]: The skill provides Python scripts to facilitate Etsy API requests and OAuth flows. These scripts correctly handle sensitive environment variables and include redacting logic in status commands to prevent accidental credential exposure.
[INDIRECT_PROMPT_INJECTION]: The skill processes data from the Etsy API (listings, shop settings), which constitutes a potential injection surface. However, the skill treats this data as structured JSON output and does not perform unsafe interpolation or execution of instructions contained within the API responses.
Ingestion points: etsy_cli.py and etsy_http.py retrieve data from Etsy's API endpoints.
Boundary markers: No explicit delimiters are used in the raw CLI output to the agent.
Capability inventory: The skill utilizes the code_execution tool and performs local file writing for caching the OpenAPI spec.
Sanitization: Output is returned as standard JSON text; no explicit sanitization for downstream agent processing is implemented beyond standard data parsing.

etsy-api