The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructions include steps to download the Zola binary from its official releases page on GitHub. GitHub is recognized as a well-known and trusted service for software distribution.
[COMMAND_EXECUTION]: The workflow involves executing standard CLI utilities including git, gh (GitHub CLI), and zola. It also calls a local shell script ./switch-site.sh located within the cloned repository to manage environment configurations.
[REMOTE_CODE_EXECUTION]: The skill clones the blog's source code from github.com/jim60105/blog.git and interacts with github.com/bot0419/ai-talks-content for pull requests. These resources are either directly owned by the skill author or hosted on established services.
[INDIRECT_PROMPT_INJECTION]: As the skill is designed to process and write blog content, it naturally has a surface for indirect prompt injection. However, the risk is mitigated as the ingested data is primarily used for text generation and static site building rather than being passed to high-risk execution sinks.

blog-post