The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: Fetches the wikipedia-pp-cli binary from the vendor's repositories on GitHub and NPM using go install and npx respectively.\n- [REMOTE_CODE_EXECUTION]: The installation instructions direct the agent to download and execute code from external package registries to set up the CLI tool.\n- [COMMAND_EXECUTION]: The skill operates by executing the wikipedia-pp-cli binary via the Read Bash tool to interact with Wikipedia APIs and local data.\n- [DATA_EXFILTRATION]: The --deliver webhook:<url> argument allows the tool to POST its output (including queried article data) to an arbitrary external URL.\n- [DATA_EXFILTRATION]: The feedback command allows transmitting local notes and agent feedback to an external endpoint if a feedback URL is configured in the environment.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from the Wikipedia REST API (summaries and HTML) which could be used to inject instructions to the agent.\n
Ingestion points: wikipedia-pp-cli page get-summary, wikipedia-pp-cli page get-html\n
Boundary markers: No explicit delimiters or instructions for the agent to ignore embedded commands are provided.\n
Capability inventory: File writing (--deliver file:), network operations (--deliver webhook:), and shell execution via Bash.\n
Sanitization: No evidence of sanitization or filtering of external API content is documented.

pp-wikipedia