The Agent Skills Directory

[PROMPT_INJECTION]: The skill is susceptible to Indirect Prompt Injection because it retrieves and processes content from untrusted external sources.
Ingestion points: The skill ingests external data from GitHub, technical blogs, and community forums (V2EX, Reddit) using web_fetch, browser, and the content-extract utility.
Boundary markers: The instructions do not define delimiters or specific "ignore embedded instructions" warnings to isolate retrieved content from the agent's core instructions.
Capability inventory: The skill possesses the ability to execute local Python scripts and perform subsequent network searches based on analyzed data.
Sanitization: No sanitization, filtering, or validation of the ingested external content is mentioned before it is processed by the LLM.
[COMMAND_EXECUTION]: The skill executes local Python scripts to facilitate advanced searching and extraction.
Evidence: It calls python3 skills/search-layer/scripts/search.py and python3 skills/content-extract/scripts/content_extract.py. These are modular calls to sibling skills used for intent-aware searching and high-fidelity scraping.
[EXTERNAL_DOWNLOADS]: The skill is designed to perform extensive external network requests to retrieve repository metadata and community feedback.
Evidence: It uses web_search, web_fetch, and integrated search utilities to access domains including github.com, reddit.com, news.ycombinator.com, and various Chinese social platforms.

github-explorer