The Agent Skills Directory

[SAFE]: No malicious patterns detected. The skill uses curl to interact with the Lab Nocturne API to fetch an API key, which is consistent with its stated purpose.
[SAFE]: Analysis of indirect prompt injection surface: (1) Ingestion points: JSON response from images.labnocturne.com. (2) Boundary markers: None. (3) Capability inventory: curl command execution. (4) Sanitization: None. The skill presents the API key and messages directly to the user; this surface is inherent to the skill's function and is evaluated as safe.
[SAFE]: No signs of obfuscation, hardcoded credentials, or persistence mechanisms were found in the skill metadata or instructions.

image-key