The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides standardized curl command templates for interacting with established shipping APIs, including SMSA, Aramex, Naqel, J&T Express, BARQ Fleet, and SPL. These operations are aligned with the skill's stated purpose.
[DATA_EXPOSURE]: Interaction with the SMSA Express API occurs over unencrypted HTTP. Although this is the vendor's official SOAP endpoint, users should be aware that the SMSA_PASSKEY and shipment details could be visible to network-level observers during transmission.
[INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface where user-supplied inputs, such as tracking numbers and shipment metadata, are interpolated into network requests.
Ingestion points: User-provided shipment details and tracking numbers utilized in SKILL.md templates.
Boundary markers: None present in the provided command examples.
Capability inventory: Network communication capabilities via curl are documented for several providers in SKILL.md.
Sanitization: No explicit sanitization or input validation logic is included in the command snippets.

saudi-shipping