The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install the tidycal-pp-cli and tidycal-pp-mcp binaries from the vendor's official repositories on GitHub and the NPM registry using npx and go install.- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute tidycal-pp-cli commands, which interact with the TidyCal API to perform actions like listing booking types, creating contacts, and generating schedule briefs.- [DATA_EXFILTRATION]: The CLI tool includes a documented --deliver webhook:<url> feature that allows routing command output to arbitrary external URLs and a feedback mechanism that can transmit local data to a remote server when configured.- [INDIRECT_PROMPT_INJECTION]: The skill presents an attack surface for indirect prompt injection as it processes external data from the TidyCal API (such as booking and contact details) and accepts user input through the $ARGUMENTS variable.
Ingestion points: External data retrieved from the TidyCal API and user input passed to the CLI commands (SKILL.md).
Boundary markers: None identified; the instructions do not specify the use of delimiters to isolate API data from the agent's instructions.
Capability inventory: The skill can execute shell commands, perform network operations, and write to the local filesystem (SKILL.md).
Sanitization: No evidence of input validation or data sanitization is described before external content is processed or passed to the shell.

pp-tidycal