The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs the user or agent to install an external CLI tool using npx -y @mvanhorn/printing-press-library or go install github.com/mvanhorn/printing-press-library/.... These resources are hosted on GitHub and NPM under the author's account, which are considered vendor-specific resources for this skill.
[COMMAND_EXECUTION]: The skill relies on the execution of a local binary, nutrition-pp-cli, via the Bash tool to perform nutrition lookups, comparisons, and logging.
[DATA_EXFILTRATION]: The skill documentation describes an --deliver webhook:<url> feature that allows the tool to POST command output to an arbitrary URL. It also includes a feedback command that can send data to a remote endpoint if NUTRITION_FEEDBACK_ENDPOINT is configured. While these are documented features, they represent potential pathways for data to leave the local environment.
[CREDENTIALS_UNSAFE]: The tool manages a USDA API key via environment variables (FDC_API_KEY or USDA_API_KEY) and stores them in a local credentials.toml file. This is a standard practice for CLI tools and does not involve hardcoded secrets in the skill itself.

pp-nutrition