The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill fetches ASCII art and weather data from several public services including asciified.thelicato.io, api.github.com, qrenco.de, wttr.in, and ascii.co.uk. These are well-known services for their respective purposes and do not involve downloading executable scripts.
[COMMAND_EXECUTION]: The skill instructs the agent to install several utility packages (pyfiglet, cowsay, boxes, toilet, ascii-image-converter, jp2a) using standard package managers like pip, apt, and snap. These are standard tools for the described functionality.
[DATA_EXFILTRATION]: While the skill uses curl to interact with external APIs, the data sent (text for banners, location for weather, subjects for art) is functional and does not involve accessing or transmitting sensitive system files or credentials.
[REMOTE_CODE_EXECUTION]: Although an automated scanner flagged a curl command to ascii.co.uk as potential RCE, manual analysis confirms it downloads HTML content intended for parsing ASCII art templates via a provided Python regex script. The content is treated as data, not executed as a shell script or binary.

ascii-art