The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes external subscription data from CSV or XLSX files to perform bulk API updates.
Ingestion points: User-provided data files (Phase 1, Step 3).
Boundary markers: Absent in the prompt instructions for file ingestion.
Capability inventory: The bulk_subscription.py script performs network mutations (POST/PATCH) and writes results to a local CSV file.
Sanitization: The script implements a strict allowlist (ACTIONS) for permitted API actions and payload fields, preventing the injection of arbitrary parameters into API calls.
[DATA_EXFILTRATION]: The skill performs network requests to the Next Commerce Admin API (*.29next.store) to manage subscription data.
The execution script uses a custom AuthenticatedRedirectHandler to ensure that sensitive Authorization headers are not leaked to external domains in the event of a redirect.
[COMMAND_EXECUTION]: The skill utilizes shell commands and a bundled Python script to perform its tasks.
It uses grep and cut to retrieve API tokens from a local .env file.
It executes scripts/bulk_subscription.py using python3 -u for unbuffered output.
The Python script is restricted to the standard library and validates the target store domain before making requests.

next-bulk-subscription