The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs the agent to download and install a binary using npx from the @mvanhorn/printing-press-library package and via go install from the author's GitHub repository.
[DATA_EXFILTRATION]: The CLI tool supports a --deliver webhook:<url> flag, which enables the agent to POST command output, including potentially sensitive aggregated data, to arbitrary external URLs.
[COMMAND_EXECUTION]: The skill requires the execution of a local binary (bandsintown-pp-cli) to perform its primary functions, including system inspection and data management.
[INDIRECT_PROMPT_INJECTION]: The skill processes data from the Bandsintown API which is an untrusted external source.
Ingestion points: Data enters the context through artists, events, pull, and sea-radar commands which fetch live API data.
Boundary markers: No specific boundary markers or instructions to ignore embedded commands are present in the prompt templates.
Capability inventory: The skill can execute shell commands, write to local files (--deliver file:), and perform network POST requests (--deliver webhook:).
Sanitization: There is no evidence of sanitization or validation of the content retrieved from the external API before it is processed by the agent.

pp-bandsintown