The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The skill utilizes eero-pp-cli auth login --chrome, which is designed to harvest session cookies directly from the Google Chrome browser to authenticate with eero's unofficial API.
[DATA_EXFILTRATION]: The command surface includes a --deliver webhook:<url> flag, which allows the agent to POST command output (including network diagnostics, device lists, and node status) to any arbitrary external URL.
[EXTERNAL_DOWNLOADS]: The instructions direct the agent to install dependencies from external sources using npx -y @mvanhorn/printing-press-library and go install github.com/mvanhorn/printing-press-library/.... These resources are owned by the skill vendor but represent remote code dependencies.
[COMMAND_EXECUTION]: The skill requires the execution of shell commands for installation (go install, npx) and operation (eero-pp-cli). It also includes a backgrounding mechanism using the shell & operator for its 'learning loop' functions.
[INDIRECT_PROMPT_INJECTION]: The skill implements an 'Automatic Learning' loop (recall, teach, playbook amend) that ingests and stores user queries and session data. While the instructions include a rule to strip PII, this system creates an attack surface where untrusted data could influence future agent behavior via stored 'playbooks'.
[DATA_EXPOSURE]: The --deliver file:<path> feature allows the agent to write network inspection results and configuration data to any location on the local file system accessible to the process.

pp-eero