The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill downloads and installs binaries using go install from github.com/mvanhorn/printing-press-library and npx from the @mvanhorn/printing-press-library package. It also suggests installing agent-browser via NPM for specific hotel search functionality.
[COMMAND_EXECUTION]: The skill primarily operates by executing the concur-pp-cli binary. It uses the Bash tool to run commands for managing reports, expenses, and travel searches, as well as for initial setup and verification.
[INDIRECT_PROMPT_INJECTION]: The skill processes expense and travel data fetched from the SAP Concur web application, which represents a surface for indirect injection.
Ingestion points: External data enters the context when the CLI fetches reports, trip itineraries, and expense details from the Concur API/Web interface (SKILL.md).
Boundary markers: Absent; the instructions do not specify delimiters to isolate untrusted data from the agent's internal instructions.
Capability inventory: The skill possesses capabilities for network operations (Concur API and optional webhooks), file system writes (SQLite database, configuration files, and credentials), and browser automation via agent-browser.
Sanitization: No specific sanitization or validation of the external Concur content is documented.

pp-concur