The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to automatically process and pay financial challenges found in external WWW-Authenticate HTTP headers (XMR402 protocol).
Ingestion points: External HTTP response headers (WWW-Authenticate) from arbitrary URLs visited by the agent.
Boundary markers: None present; the agent is instructed to parse the header and pay the invoice directly.
Capability inventory: The pay_402 and transfer commands in scripts/monero_wallet_rpc.py facilitate real financial transactions.
Sanitization: The Python helper script performs basic type conversion (casting amount to float) but does not validate the destination address or the legitimacy of the payment request.
[DATA_EXFILTRATION]: The skill uses a sensitive AGENT_API_KEY for authentication with the local gateway.
While the scripts/monero_wallet_rpc.py script hardcodes the GATEWAY_URL to 127.0.0.1 to prevent credential exfiltration to remote hosts, the instructions still describe manual curl commands that handle the key.
The script uses requests.Session(trust_env=False) which is a security best practice to prevent the key from being intercepted by malicious system-level proxies.

monero-wallet