The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process large volumes of untrusted data from external sources, including social media (Reddit, X, LinkedIn), developer communities, and press outlets. This content is then triaged and analyzed by an agent. This creates a surface for indirect prompt injection, where malicious instructions hidden in web content could attempt to influence the agent's behavior.
Ingestion points: Data fetched via nimble search and nimble extract from third-party websites (e.g., Reddit, Hacker News, TechCrunch).
Capability inventory: The skill utilizes the Agent tool for sub-agent spawning, Write for saving reports to the filesystem, and various Bash tools for data processing.
Sanitization: The provided HTML template includes basic escaping and URL validation logic to mitigate typical cross-site scripting (XSS) when rendering the output widget.
[PERSISTENCE]: The onboarding documentation instructs the user to add a NIMBLE_API_KEY environment variable to shell initialization files such as ~/.zshrc or ~/.bashrc. This is a standard persistence mechanism used here for legitimate CLI tool configuration to ensure the API key remains available across terminal sessions.

launch-monitor