The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes local shell scripts (execute-zap.sh) to build and broadcast blockchain transactions. While this involves running commands with user-supplied arguments, the script implements robust input validation using regular expressions for all parameters (amounts, addresses, symbols, and identifiers) to prevent shell injection.
[INDIRECT_PROMPT_INJECTION]: The skill ingests data from external KyberSwap APIs to resolve token information and build transaction routes, which represents a potential attack surface.
Ingestion points: Data is retrieved from zap-api.kyberswap.com and token-api.kyberswap.com within fast-zap.sh.
Boundary markers: The skill processes API responses as structured JSON using jq rather than raw text interpolation.
Capability inventory: The skill can execute shell scripts and broadcast transactions to the blockchain via the cast tool.
Sanitization: Input parameters are validated against strict regex patterns, and the script includes logic to redact sensitive hex strings (such as private keys) from its output using sed to prevent credential leakage.
[EXTERNAL_DOWNLOADS]: The skill instructions reference official KyberSwap APIs and well-known developer tools such as Foundry. These are official vendor resources or widely recognized services and are used exclusively for the skill's primary financial functionality.

zap-fast