The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill requires the installation of the flipp-pp-cli binary. It provides instructions to download this tool using npx from the @mvanhorn/printing-press-library package and via go install from the github.com/mvanhorn/printing-press-library repository.
[COMMAND_EXECUTION]: All primary functionality is delivered through the execution of the flipp-pp-cli and flipp-pp-mcp binaries. This includes searching for deals, managing watchlists, and comparing basket prices.
[DATA_EXFILTRATION]: The CLI includes an --deliver webhook:<url> feature that allows the agent to POST the output of any command to an external URL. While intended for automation, this provides a mechanism for routing data to remote servers.
[INDIRECT_PROMPT_INJECTION]: The skill ingests unauthenticated data from external Flipp web endpoints (flyers, items, and deals).
Ingestion points: Data is ingested from Flipp's public web endpoints via the search and flyer list commands (SKILL.md).
Boundary markers: The skill uses --agent and --json flags to structure output but does not explicitly instruct the agent to ignore instructions that might be embedded in the retrieved grocery data.
Capability inventory: The skill can execute shell commands (flipp-pp-cli), write files (--deliver file:), and perform network operations (--deliver webhook: and API calls) (SKILL.md).
Sanitization: No explicit sanitization or filtering of the retrieved flyer content is described before it is processed by the agent.

pp-flipp