The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill documents the installation of DuckDB extensions such as httpfs, excel, and sqlite_scanner in reference/cards/extensions.md. These extensions are fetched from official DuckDB repositories, which is a standard feature of the database engine.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data sources, creating a surface for indirect prompt injection.
Ingestion points: Data enters the environment via SQL functions like read_csv, read_parquet, and read_json as described in reference/cards/file-analytics.md and SKILL.md.
Boundary markers: The instructions do not specify explicit delimiters or "ignore instructions" warnings for the content of the processed files.
Capability inventory: The skill utilizes the evaluate_matlab_code tool to execute MATLAB commands and DuckDB SQL, which involves file system access and potential network operations through extensions.
Sanitization: There is no mention of sanitizing or validating the content of the external files before they are processed by the agent.

matlab-use-duckdb