The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill requires downloading and installing the myfitnesspal-pp-cli tool from the vendor's GitHub repository or npm registry using commands like go install github.com/mvanhorn/printing-press-library/... and npx -y @mvanhorn/printing-press-library.
[REMOTE_CODE_EXECUTION]: The agent is instructed to install and then execute external binaries and scripts provided by the vendor to perform data synchronization and analysis.
[DATA_EXFILTRATION]: The CLI tool includes a --deliver webhook:<url> feature that enables sending command outputs—containing sensitive nutrition, diary, and profile data—to arbitrary external URLs. It also includes a feedback mechanism that can be configured to automatically POST data from a local file (~/.myfitnesspal-pp-cli/feedback.jsonl) to a remote endpoint (MYFITNESSPAL_FEEDBACK_ENDPOINT).
[COMMAND_EXECUTION]: The skill uses the Read Bash tool to invoke the CLI and interact with the local operating system and SQLite database.
[INDIRECT_PROMPT_INJECTION]:
Ingestion points: Dietary entries, exercise logs, and weight measurements are fetched from the external MyFitnessPal service (SKILL.md).
Boundary markers: None explicitly defined to separate external data from agent instructions.
Capability inventory: The skill has Read Bash capabilities for executing commands and managing local storage (SKILL.md).
Sanitization: The skill relies on structured JSON/CSV output from the CLI but does not specify further sanitization for ingested diary content.

pp-myfitnesspal