The Agent Skills Directory

[SAFE]: The skill demonstrates safe behavior by using environment variables (NEXSCOPE_API_KEY) for secret management and providing clear warnings to the user about dynamic credit consumption.
[COMMAND_EXECUTION]: The script scripts/etsy_store_query.py is a standard utility that uses the Python standard library to perform authorized API calls to the vendor's gateway and write session logs to a local directory. It does not perform unauthorized or privileged commands.
[DATA_EXPOSURE_AND_EXFILTRATION]: Network communication is restricted to the vendor's official API proxy base. File system interactions are limited to creating and updating session history files in a nexscope subdirectory within the user's home or current working directory.
[INDIRECT_PROMPT_INJECTION]: The skill ingests external marketplace data from Etsy stores (names, descriptions, and categories) into the agent's context. While this represents a potential injection surface, the risk is minimized by the structured data handling and the absence of high-privilege capabilities triggered directly by this data.
Ingestion points: Etsy store data returned from the _ehunt_storeQuery tool.
Boundary markers: None explicitly defined in the provided script output.
Capability inventory: Network POST requests via urllib and local file writing for session persistence.
Sanitization: Standard JSON parsing and summary generation logic.

ecommerce-etsy-store-query