The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill fetches content from the public GeekNews RSS feed via FeedBurner using the Python urllib.request library. It also instructs the agent to use npx to download and run @nomadamas/k-skill, a management utility associated with the skill author's organization.
[REMOTE_CODE_EXECUTION]: The bootstrap instructions in SKILL.md and instruction.md direct the agent to execute code from the @nomadamas/k-skill package using npx. This is used to retrieve current instructions and execute skill scripts in a consistent runtime environment.
[COMMAND_EXECUTION]: The skill relies on shell commands (npx) to perform updates, list files, and execute the core Python logic.
[INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection by ingesting data from external RSS feeds. An attacker controlling the feed could attempt to inject instructions into titles or summaries to influence the agent during summarization.
Ingestion points: The scripts/geeknews_search.py script fetches data from the GeekNews feed URL or a user-provided file.
Boundary markers: None explicitly defined in the prompts to isolate feed content from agent instructions.
Capability inventory: The skill has network read access for feed retrieval and local file read access for testing.
Sanitization: The script uses html.parser.HTMLParser and unescape to clean content and employs regular expressions to strip XML tags, which provides basic structural sanitization.

geeknews-search