The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill's primary instructions in SKILL.md require the execution of npx -y @nomadamas/k-skill@0 instruct mofa-travel-safety, which downloads and runs external code from the npm registry originating from an unverified source.
[COMMAND_EXECUTION]: The skill relies on shell commands including npx and curl for its core workflow and setup, as documented in SKILL.md and instruction.md.
[INDIRECT_PROMPT_INJECTION]: The skill processes and summarizes data from an external API proxy, which presents an attack surface for indirect prompt injection.
Ingestion points: API responses from https://k-skill-proxy.nomadamas.org/v1/mofa-travel-safety/travel-alerts are processed and summarized by the agent as specified in instruction.md.
Boundary markers: None present; the agent is instructed to summarize fields directly from the API response.
Capability inventory: The skill utilizes npx for instruction retrieval and updates, curl for network requests, and executes a Python script for data processing.
Sanitization: No sanitization or validation of the external API content is defined before the agent processes and summarizes it.

mofa-travel-safety