The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill fetches the ahrefs-pp-cli and ahrefs-pp-mcp tools from the author's official GitHub repository and NPM organization.
Evidence: npx -y @mvanhorn/printing-press-library install ahrefs --cli-only in SKILL.md.
Evidence: go install github.com/mvanhorn/printing-press-library/library/marketing/ahrefs/cmd/ahrefs-pp-cli@latest in SKILL.md.
[REMOTE_CODE_EXECUTION]: The installation instructions utilize npx and go install to retrieve and execute code from remote repositories to set up the CLI environment.
[DATA_EXFILTRATION]: The CLI includes a --deliver webhook:<url> functionality, which allows the agent to POST command results (such as site audit data) to an external URL.
Evidence: webhook:<url> | POST the output body to the URL in SKILL.md.
[INDIRECT_PROMPT_INJECTION]: The skill translates natural language user queries into CLI commands, which represents a potential injection surface if the input is not strictly validated.
Ingestion points: User capability descriptions are passed to the ahrefs-pp-cli which command in SKILL.md.
Boundary markers: Absent; user queries are interpolated directly into the capability search.
Capability inventory: The skill can execute various read-only data inspection and synchronization commands.
Sanitization: No explicit sanitization or filtering of the user-provided query is documented before it is passed to the CLI.

pp-ahrefs