The Agent Skills Directory

[SAFE]: The skill implements a legitimate API client for DataForSEO. It manages authentication and requests to the official service domain (api.dataforseo.com).
[DATA_EXFILTRATION]: The skill stores user-provided API credentials in a local configuration file at ~/.dataforseo_config.json. The code correctly applies restricted file permissions (0o600) to ensure that only the owner can read the secrets, which is a standard and secure practice for local credential management.
[INDIRECT_PROMPT_INJECTION]: 1. Ingestion points: Data is fetched from various DataForSEO API endpoints in scripts/dataforseo_client.py. 2. Boundary markers: No explicit boundaries are used during data processing. 3. Capability inventory: The skill uses urlopen for API calls and open for writing CSV files to ~/dataforseo_outputs/. 4. Sanitization: Results are flattened and written to a structured CSV format.

dataforseo