The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the luma-pp-cli and luma-pp-mcp tools. Installation methods include go install from github.com/mvanhorn/printing-press-library and npx from @mvanhorn/printing-press-library. These resources are associated with the project vendor, mvanhorn.
[DATA_EXFILTRATION]: The CLI tool includes a --deliver flag with support for webhook:<url>. This capability allows command output to be automatically POSTed to an external URL, providing a mechanism for data to leave the agent environment.
[PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection due to its handling of external API data. Ingestion points: Data is fetched from api.luma.com (event details, descriptions, and community information) using the events list, events get, and calendars commands. Boundary markers: There are no explicit delimiters or instructions provided to the agent to distinguish between the fetched data and its internal instructions. Capability inventory: The skill allows file writing (--out and file:<path>) and network requests (webhook:<url>), and it utilizes the Read Bash tool to execute the CLI. Sanitization: No validation or escaping of the content retrieved from the external API is mentioned in the skill definition.

pp-luma