The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses curl to query rdap.org (domain registration) and registry.npmjs.org (npm packages), and gh api to check GitHub usernames. These are legitimate, read-only operations for the skill's purpose.
[EXTERNAL_DOWNLOADS]: The skill performs HTTP GET requests to check for the existence (404 vs 200) of names on external registries. These calls are scoped to metadata checks and do not involve downloading or executing external scripts.
[REMOTE_CODE_EXECUTION]: While it uses shell commands, they are strictly defined for API queries and do not process arbitrary remote code. The ! command syntax is not utilized for hidden execution.
[DATA_EXFILTRATION]: The skill queries public APIs with potential project names. While these names are sent to external services, this is the core function of the skill and is disclosed to the user. No sensitive environment variables or local files are accessed.
[PROMPT_INJECTION]: The instructions contain strict procedural requirements and do not include patterns designed to bypass AI safety filters or override system instructions.

namekit