The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the pvgis-pp-cli binary and related components from the @mvanhorn/printing-press-library NPM package and the mvanhorn/printing-press-library repository on GitHub.- [DATA_EXFILTRATION]: The CLI tool provides a --deliver webhook:<url> parameter that enables the agent to POST command outputs to arbitrary external network endpoints. This functionality, while documented, serves as a potential vector for data exfiltration.- [COMMAND_EXECUTION]: The skill relies on the execution of the pvgis-pp-cli binary within the host environment to perform solar yield analysis and weather data retrieval.- [PROMPT_INJECTION]: The skill processes untrusted external data, creating a surface for indirect prompt injection where malicious instructions embedded in data could influence agent actions.
Ingestion points: The skill reads site and weather data from CSV files via the --input and --within flags. It also accepts natural language input for the which command to resolve capabilities.
Boundary markers: There are no explicit boundary markers or instructions defined to prevent the agent from following instructions embedded within the processed CSV data.
Capability inventory: The skill possesses the ability to write to arbitrary file paths (--deliver file:<path>), perform network POST requests (--deliver webhook:<url>), and execute shell commands.
Sanitization: The instructions do not specify any validation, filtering, or sanitization of the content ingested from external CSV files.

pp-pvgis