The Agent Skills Directory

[PERSISTENCE]: The references/onboarding.md file provides instructions to append environment variable exports to shell profile files such as ~/.bashrc and ~/.zshrc to maintain access across sessions.
[EXTERNAL_DOWNLOADS]: The scripts/onboarding.py file requires non-standard Python libraries including requests, qrcode, and pillow for handling web requests and generating payment QR codes.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input from patent identifiers and user-provided authentication data which could lead to prompt injection vulnerabilities.
Ingestion points: Patent IDs and publication numbers in scripts/zhihuiya_fulltext_image.py; phone numbers and login codes in scripts/onboarding.py.
Boundary markers: The skill lacks explicit delimiters or instructions to ignore embedded commands in the data it processes.
Capability inventory: The skill performs network requests to remote APIs and writes metadata and results to the local file system.
Sanitization: Input parameters are not strictly validated or sanitized before being transmitted to external APIs or used in file path generation.
[DYNAMIC_EXECUTION]: The scripts/zhihuiya_fulltext_image.py script manipulates sys.path to dynamically load modules from computed relative paths (../../_shared).

linkfox-zhihuiya-fulltext-image