The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs the agent to install binaries using go install from github.com/mvanhorn/printing-press-library and npx from @mvanhorn/printing-press-library. These sources are vendor-controlled resources associated with the skill author.
[DATA_EXFILTRATION]: The CLI tool supports a --deliver webhook:<url> flag, which allows command output to be POSTed to arbitrary external URLs. Additionally, the feedback command can be configured to automatically upload local logs to a remote endpoint via the SEC_EDGAR_FEEDBACK_ENDPOINT environment variable.
[COMMAND_EXECUTION]: The skill requires the Bash tool to execute various subcommands of the sec-edgar-pp-cli binary for syncing data, querying financials, and managing local profiles.
[INDIRECT_PROMPT_INJECTION]: The skill ingests and processes untrusted data from external sources including SEC Atom feeds, XBRL financial facts, and proxy statements.
Ingestion points: SEC filing data is ingested through the watch, facts, and ownership commands described in SKILL.md.
Boundary markers: Absent. The instructions do not provide delimiters or warnings for the agent to ignore instructions that might be embedded within the SEC filing text.
Capability inventory: The skill has access to shell execution (bash), file writing (--deliver file:<path>), and network operations (webhook delivery and API synchronization).
Sanitization: Absent. There is no mention of sanitizing or escaping the content retrieved from the SEC before it is processed by the agent.

pp-sec-edgar