The Agent Skills Directory

[DATA_EXFILTRATION]: The skill documents an output delivery system using the --deliver webhook:<url> flag, which allows the agent to POST command results, potentially containing sensitive memory data, to any external network endpoint.
[EXTERNAL_DOWNLOADS]: The skill requires the installation of external binaries using npx -y @mvanhorn/printing-press-library and go install github.com/mvanhorn/printing-press-library/.... These resources originate from the vendor's own repository and are used for the skill's primary functionality.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to retrieve and process data from Supermemory, which creates a surface for indirect prompt injection if the retrieved content contains instructions intended to influence the agent's behavior.
Ingestion points: Untrusted data enters the agent context through the supermemory-recall, sync, and search commands as described in SKILL.md.
Boundary markers: No explicit markers or instructions are provided to the agent to treat retrieved memory content as untrusted data.
Capability inventory: The skill has access to the Bash tool for shell execution and a built-in network delivery mechanism via the --deliver flag.
Sanitization: There is no mention of sanitization or filtering applied to the data retrieved from external memory before it is presented to the agent.

pp-supermemory-admin