The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructions recommend the agent install the sports-skills package using pip to enable its core functionality.
[COMMAND_EXECUTION]: The skill uses the sports-skills CLI tool to fetch golf data, which requires executing shell commands.
[INDIRECT_PROMPT_INJECTION]: The skill ingests external data from ESPN, creating a surface for potential instruction injection.
Ingestion points: Golfer profiles, news articles, and tournament leaderboards retrieved via API commands in SKILL.md and references/api-reference.md.
Boundary markers: The skill does not define clear delimiters or instruct the agent to ignore instructions within the retrieved external content.
Capability inventory: The agent has permissions to execute shell commands and install packages, which could be misused if data contains malicious prompts.
Sanitization: There is no evidence of content sanitization or validation of the data retrieved from external endpoints.

golf-data