The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill is designed to fetch and download 3D models from several external sources.
It downloads sample assets from the Khronos Group's public GitHub repository.
It performs live searches against the Sketchfab and Poly Pizza APIs to find model candidates.
It supports downloading files from arbitrary URLs discovered via search results once the user confirms the choice.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted metadata from external 3D model providers, creating a surface for indirect prompt injection attacks.
Ingestion points: Model names, descriptions, and license labels are retrieved from external APIs (Sketchfab and Poly Pizza) in SKILL.md.
Boundary markers: There are no specific instructions or delimiters provided to prevent the agent from following instructions that might be embedded in the model metadata.
Capability inventory: The skill uses officecli for file modification, curl for network requests, and python3 for processing results.
Sanitization: No sanitization or filtering is performed on the data fetched from external APIs before it is displayed to the user or used in the workflow.
[DYNAMIC_EXECUTION]: The skill uses python3 -c to execute an inline script that parses JSON search results from the Sketchfab API.
[COMMAND_EXECUTION]: The skill employs shell commands, including curl, python3, and cp, to perform network operations, data parsing, and file management as part of its core model discovery functionality.

morph-ppt-3d