The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill fetches and runs the @notis_ai/cli package from the NPM registry using npx, which is a well-known package manager and an expected method for the tool vendor.
[COMMAND_EXECUTION]: The skill heavily relies on shell command execution for its core functionality, including account management (notis profile), tool discovery (notis tools search), and tool execution.
[INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection as it retrieves and processes tool names and schemas from an external service. \n
Ingestion points: Output from notis tools search and notis tools describe (SKILL.md). \n
Boundary markers: No explicit delimiters or instructions are provided to the agent to ignore potential commands within tool outputs. \n
Capability inventory: The agent can execute any discovered tool via the notis tools exec command. \n
Sanitization: No validation or sanitization of tool names or argument schemas is performed before execution.
[DYNAMIC_EXECUTION]: In the event of a required update, the skill instructs the agent to execute a command (update_command) provided dynamically in the CLI response (references/troubleshooting.md).

notis-cli