The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs the installation of external binaries and packages from the 'mvanhorn' vendor. This includes the @mvanhorn/printing-press-library NPM package via npx and Go binaries from github.com/mvanhorn/printing-press-library using go install.- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted rental listing data and microdata from Apartments.com, which could contain malicious instructions.
Ingestion points: Data is entering through the rentals and listing commands defined in SKILL.md.
Boundary markers: None are specified to delimit external content or instruct the agent to ignore embedded instructions.
Capability inventory: The skill has access to the Bash and Read tools, enabling command execution and file reading.
Sanitization: The instructions do not describe any sanitization or validation of the extracted HTML content or schema.org microdata before processing.- [DATA_EXFILTRATION]: The apartments-pp-cli tool features a --deliver webhook:<url> argument. This allows the output of rental searches and analysis to be POSTed to arbitrary external URLs, creating a potential path for data exfiltration if the agent is directed to route sensitive content.- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to perform installation checks (which, --version) and to execute the apartments-pp-cli tool for apartment searches and local SQLite database management.

pp-apartments