The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill requires the installation of the pop-pp-cli binary using npx from the @mvanhorn/printing-press-library NPM package or via go install from the github.com/mvanhorn/printing-press-library repository. These sources are owned by the skill's author.
[COMMAND_EXECUTION]: The skill is primarily designed to execute shell commands using the pop-pp-cli tool. It provides a mapping of user intentions to specific CLI commands and flags.
[DATA_EXFILTRATION]: The skill documents an '--deliver' flag that supports a webhook:<url> sink. This feature allows the CLI to POST command output, which may contain sensitive invoice data, to an external URL. This is an intended feature of the tool but represents a potential data path.
[CREDENTIALS_UNSAFE]: The skill provides instructions for setting an API key (POP_API_KEY) via environment variables or a local configuration file (~/.config/pop-pp-cli/config.toml). It follows standard practices for local credential management and does not include hardcoded secrets.

pp-pop