The Agent Skills Directory

[SAFE]: The skill serves as a reference for developers integrating with the Opencals API using the official @opencals/storefront-sdk library. All external links and resources point to legitimate vendor-controlled domains such as opencals.com and github.com/letsopencals.
[DATA_EXFILTRATION]: The instructions correctly advise on the use of environment variables (process.env.OPENCALS_API_KEY) for secret management and use standard Authorization headers for customer authentication. There are no attempts to access sensitive system files or exfiltrate data to unauthorized third-party servers.
[INDIRECT_PROMPT_INJECTION]: The skill involves ingesting data from API endpoints (e.g., product details and availability). However, the processing is limited to standard booking flows and data rendering. No dangerous capabilities, such as arbitrary command execution or unauthorized file writing, are associated with the consumption of this data.

opencals-storefront-api