The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the kit-pp-cli and kit-pp-mcp tools. The installation methods include npx for the @mvanhorn/printing-press-library package and go install for the repository located at github.com/mvanhorn/printing-press-library. These resources are managed by the skill vendor.
[COMMAND_EXECUTION]: The skill requires the use of the Bash tool to execute the kit-pp-cli binary. This tool is used to perform account audits, manage broadcasts, and process subscriber data through the Kit API.
[INDIRECT_PROMPT_INJECTION]: The skill processes data from the Kit API, including subscriber details, email snippets, and broadcast content. This external data is untrusted and represents a potential vector for indirect prompt injection if it contains instructions designed to manipulate the agent's logic.
Ingestion points: Kit API responses for subscriber dossieres, content inventories, and account snapshots (SKILL.md).
Boundary markers: The skill documentation does not define explicit boundary markers or warnings to the agent to ignore instructions embedded in API data.
Capability inventory: The agent has the ability to execute shell commands via Bash, write files locally using the --deliver file:<path> flag, and send data to external webhooks via the --deliver webhook:<url> flag.
Sanitization: No sanitization or escaping mechanisms for API data are documented in the skill instructions.

pp-kit