The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes user-provided prompts and media references which are then sent to the Kling API. This creates a surface for indirect prompt injection. Ingestion points: prompt, image_url, and video_url parameters in SKILL.md. Boundary markers: Absent. Capability inventory: Performs API calls to Kling and reads local files for conversion. Sanitization: None described for user prompt inputs.
[DATA_EXFILTRATION]: The skill reads local media files (e.g., via image_path or sound_file) and transmits them to the official Kling API endpoint at api-singapore.klingai.com. This is the intended function of the skill but involves sending local data to an external service provider.

kling-official