The Agent Skills Directory

[COMMAND_EXECUTION]: Uses curl to perform HTTP DELETE requests against an external API. The command execution interpolates variables such as the API key, base URL, and user-provided image ID.- [EXTERNAL_DOWNLOADS]: Automatically fetches a temporary authentication token from the vendor's domain (images.labnocturne.com) if a local API key is not configured in the environment.- [PROMPT_INJECTION]: Analysis of the indirect prompt injection surface identifies the following factors:
Ingestion points: The image_id parameter is accepted directly from user input (e.g., via /delete).
Boundary markers: No explicit delimiters or boundary markers are used when interpolating the user input into the shell command.
Capability inventory: The skill possesses the capability to execute curl commands on the host system.
Sanitization: No explicit sanitization or shell-escaping is performed on the image_id before command construction, though instructions describe a expected pattern.

image-delete