The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill connects to Busabase Cloud (busabase.com) or user-specified custom URLs to perform OAuth authentication and data synchronization. This behavior is documented and central to the skill's purpose as a Busabase control panel.
[COMMAND_EXECUTION]: The app/package.json defines scripts for local development (node server.js) and SDK bundling using esbuild. These are standard utilities for providing a local preview environment and managing build artifacts.
[PROMPT_INJECTION]: The skill processes merchant lead data from external Busabase Bases, which constitutes an indirect prompt injection surface.
Ingestion points: Lead records are retrieved from Busabase using the readAllRecords function in app/app/js/providers/busabase-provider.js.
Boundary markers: The application uses escapeHtml for all data rendering to ensure content is treated as data rather than instructions.
Capability inventory: The skill is authorized to perform records.changeRequest and nodes.createChangeRequest operations in Busabase, as defined in app/app/js/config.js.
Sanitization: Input data is sanitized via escapeHtml in app/app/app.js and app/app/js/connect-gate.js before being displayed or processed.

kelly-lead-funnel