The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill uses curl to fetch JSON data from external sources including aihot.virxact.com and GitHub repositories (zarazhangrui/follow-builders). These are data-gathering operations and do not involve piping remote content directly into an interpreter.
[COMMAND_EXECUTION]: The skill utilizes shell commands (curl, date, powershell) and an external CLI utility named opencli to query various platforms like Hacker News, Reddit, V2EX, Weibo, and Twitter.
[INDIRECT_PROMPT_INJECTION]: The skill has a high surface area for indirect prompt injection attacks.
Ingestion points: Processes untrusted content from third-party APIs (aihot), GitHub feeds, and social media platforms (Reddit, Twitter, Weibo, Hacker News) via the opencli and web-access tools.
Boundary markers: Absent. The instructions do not provide delimiters or specific guidelines for the agent to distinguish between its instructions and the data being processed.
Capability inventory: The skill possesses network access capabilities and the ability to execute local commands to aggregate and format data.
Sanitization: Absent. The skill is instructed to directly summarize content, including user comments from external platforms, without filtering for potentially malicious instructions embedded in that text.

hotspot-collector