The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses the mocli CLI tool to execute commands like note search, note homepage, and note mine. This execution is restricted to the specific subcommands and arguments necessary for managing and viewing notes on the Mowen platform.
[PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it ingests and processes untrusted content (note titles and summaries) from the Mowen service. This behavior is inherent to the skill's primary purpose of displaying note content.
Ingestion points: Note metadata such as title and brief are ingested into the agent context in SKILL.md via note listing and search results.
Boundary markers: No explicit delimiters are specified in the current instruction set to separate untrusted content from system instructions.
Capability inventory: The skill performs shell-based interactions using the mocli binary.
Sanitization: The instructions do not specify any validation or sanitization routines for the content returned by the CLI tool before it is processed by the agent.

mo-note