The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the @membranehq/cli package from the npm registry. As this package is the primary tool provided by the skill's author (membrane) for interacting with their service, this is a standard and expected dependency.
[COMMAND_EXECUTION]: The skill relies on executing shell commands via the membrane CLI to manage authentication, list actions, and perform CRM operations. These commands are the intended interface for the skill's functionality.
[INDIRECT_PROMPT_INJECTION]: Because the skill processes records and data from an external CRM, there is a potential surface for indirect prompt injection if those records contain malicious instructions. The skill does not currently specify explicit boundary markers for this data, though the risk is typical for any integration handling external content.

pancake-crm