The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill directs users to install a CLI tool and an MCP server using go install from GitHub (github.com/mvanhorn/printing-press-library) and npx from npm (@mvanhorn/printing-press-library). These resources are owned by the skill's vendor.
[COMMAND_EXECUTION]: The skill's primary functionality is to execute the lemonsqueezy-pp-cli binary for store management and data processing.
[DATA_EXFILTRATION]: The CLI tool includes a --deliver webhook:<url> feature that allows sending command results to an arbitrary external URL, which serves as a potential exfiltration vector for store data.
[PROMPT_INJECTION]: The skill exposes an indirect prompt injection surface by processing natural language user input through the which and feedback commands.
Ingestion points: User-provided strings are passed directly to the which and feedback subcommands in SKILL.md.
Boundary markers: No delimiters or instructions are used to separate untrusted data from the command structure.
Capability inventory: The skill can execute subprocesses, write to local feedback logs (~/.local/share/lemonsqueezy-pp-cli/feedback.jsonl), and perform network requests via API and webhook delivery.
Sanitization: The instructions do not specify any validation or sanitization of the input strings before they are processed by the CLI.

pp-lemonsqueezy