The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs the user to install the Membrane CLI (@membranehq/cli) from the public npm registry. This is a standard procedure for utilizing the vendor's integration tools.
[COMMAND_EXECUTION]: The skill utilizes the membrane command-line interface to perform authentication, manage connections, and execute project management actions such as creating tasks and listing time entries.
[INDIRECT_PROMPT_INJECTION]: The skill processes external data from Teamwork, such as task comments, notebook entries, and project descriptions, which could contain malicious instructions.
Ingestion points: External data is retrieved through actions like list-task-comments, list-tasks, and list-projects defined in SKILL.md.
Boundary markers: The instructions do not define specific delimiters or instructions to ignore potentially malicious embedded content within the retrieved project data.
Capability inventory: The skill has the ability to write data (e.g., create-task, update-task) and perform arbitrary API requests via the membrane request command.
Sanitization: There is no evidence of sanitization or content validation for retrieved Teamwork data before it is processed by the agent.

teamwork