The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The onboarding script (scripts/onboarding.py) recommends the installation of the requests, qrcode, and pillow libraries using pip. These are well-known, standard Python packages.
[DATA_EXFILTRATION]: The skill manages sensitive information, including user phone numbers for login and API keys for authentication. This data is transmitted to the vendor's official domains, such as api.linkfox.com and tool-gateway.linkfox.com, for legitimate service functionality.
[PERSISTENCE]: The onboarding documentation instructs users on how to persist their API key by adding export commands to shell profile files like ~/.bashrc and ~/.zshrc. This is a conventional method for maintaining environment variables across sessions.
[COMMAND_EXECUTION]: The provided Python scripts execute network requests and perform file system operations to store search results locally. These actions are aligned with the skill's stated purpose of product discovery and data caching.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and display product data (titles, brand names) retrieved from the Ozon marketplace.
Ingestion points: Data is received in scripts/mpstats_ozon_product_search.py from the external MPSTATS API.
Boundary markers: The skill does not implement specific delimiters or warnings to ignore instructions embedded within the product data.
Capability inventory: The skill includes the ability to write JSON data to the local workspace and perform network operations via the vendor's gateway.
Sanitization: There is no explicit evidence of sanitizing external product titles before they are processed or displayed.

linkfox-mpstats-ozon-product-search