The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill facilitates the discovery and installation of external packages and skills from GitHub repositories using the npx skills add command.
[REMOTE_CODE_EXECUTION]: The skill provides instructions for installing and executing remote code from GitHub repositories. It specifically suggests using the -y flag with npx skills add, which bypasses user confirmation prompts and allows for automated installation of third-party code.
[COMMAND_EXECUTION]: The skill's primary functionality relies on executing shell commands, including npx skills find, npx skills add, npx skills check, and npx skills update.
[INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it ingests and processes untrusted data from the output of the npx skills find command, which may contain attacker-controlled descriptions or instructions from third-party repositories.
Ingestion points: Results returned from the npx skills find [query] command in the terminal.
Boundary markers: None identified in the instructions for processing search results.
Capability inventory: Ability to execute shell commands and install remote software packages via npx skills add.
Sanitization: No validation or sanitization of the search output is specified before presenting it to the user or proceeding with installation.

find-skills