The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs the user to install the astropy package and its optional extras using uv pip. These are standard installations of a well-known scientific library.
[INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it is designed to ingest and process external astronomical data files (FITS, CSV, HDF5, VOTable) and fetch data from remote URLs or S3 buckets.
Ingestion points: External data files read via Table.read, fits.open, and CCDData.read, as well as remote content fetched via astropy.utils.data.download_file or remote FITS URIs.
Boundary markers: The instructions recommend using context managers for file handling but do not specify security-focused delimiters for the content of the data files during prompt interpolation.
Capability inventory: The skill utilizes file system read/write operations and network access (HTTP, S3) for data retrieval and coordinate name resolution.
Sanitization: The 'Agent operating procedure' includes steps to check physical plausibility and validate units, which serve as scientific validation but not technical security sanitization against adversarial data content.
[DATA_EXFILTRATION]: Several features of the library, such as SkyCoord.from_name() and EarthLocation.of_address(), involve sending queries to remote third-party services (SIMBAD, NED, geocoding services). The skill documentation proactively warns users against sending confidential or proprietary identifiers to these services and advises confirming network actions with the user.

astropy