The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The skill documents that authentication data and session cookies are stored locally in the ~/.config/yahoo-finance-pp-cli/ directory.
[DATA_EXFILTRATION]: The CLI includes a --deliver webhook:<url> flag, which enables the agent to POST command outputs (potentially containing sensitive portfolio or session data) to an arbitrary external URL.
[COMMAND_EXECUTION]: The skill relies on the bash tool to execute the yahoo-finance-pp-cli binary and perform installation tasks.
[EXTERNAL_DOWNLOADS]: The skill instructs the user or agent to download and install external binaries using npx and go install from a GitHub repository (github.com/mvanhorn/printing-press-library).
[INDIRECT_PROMPT_INJECTION]: The skill processes external, untrusted market data, news, and insights from Yahoo Finance.
Ingestion points: The skill fetches data via commands such as quote, digest, and insights (SKILL.md).
Boundary markers: There are no explicit delimiters or instructions provided to separate external data from agent instructions.
Capability inventory: The skill uses shell execution to run a CLI tool which can perform network and file system operations.
Sanitization: No specific sanitization or validation of the fetched external data is described.
[DYNAMIC_EXECUTION]: The sql command allows the agent to execute raw SQL queries against a local SQLite database, which could be abused for unauthorized data access or manipulation.
[PRIVILEGE_ESCALATION]: The auth login --chrome command accesses sensitive browser data by importing session cookies from Chrome, representing a high-privilege access to local user data.

pp-yahoo-finance