The Agent Skills Directory

[DATA_EXPOSURE]: The skill instructions and code samples explicitly reference and access ~/.oci/config. This file typically contains sensitive OCI credentials, including API private keys, user OCIDs, and tenancy OCIDs, which are necessary for the OCI SDK to authenticate.
[INDIRECT_PROMPT_INJECTION]: The skill facilitates the processing of untrusted external data in the form of OCI event resource changes. While the provided examples use static patterns, the resulting infrastructure is designed to trigger actions based on arbitrary external cloud events.
Ingestion points: OCI Event service data representing state changes in compute instances, storage buckets, and IAM policies.
Boundary markers: None; the skill does not implement delimiters or specific instructions to ignore malicious data within event payloads.
Capability inventory: The skill utilizes oci.events.EventsClient (Python) and oci events rule create (CLI) to write infrastructure rules, and oci.ons.NotificationDataPlaneClient to create subscriptions that route data to HTTPS endpoints or Slack webhooks.
Sanitization: Absent; the skill passes JSON condition strings directly to the OCI API without validation or escaping of the internal event data components.
[EXTERNAL_DOWNLOADS]: The skill requires the installation of the oci Python package via pip install oci. This is the official and well-known SDK for Oracle Cloud Infrastructure.
[COMMAND_EXECUTION]: The skill executes OCI CLI commands (e.g., oci events rule create, oci ons subscription list) via the Bash tool to provision and verify cloud infrastructure components.

oraclecloud-webhooks-events