The Agent Skills Directory

[PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through its social listening workflow.
Ingestion points: The skill fetches untrusted content from Reddit, Hacker News, and Bluesky via API endpoints using curl (referenced in references/listening.md).
Boundary markers: Absent. There are no instructions or delimiters defined to help the agent distinguish between its instructions and the external data it processes.
Capability inventory: The skill utilizes curl for network requests and dev-browser (Playwright) for browser navigation and interaction.
Sanitization: Absent. External content is parsed by jq but the resulting text is passed to the agent without filtering or escaping for malicious prompts.
[COMMAND_EXECUTION]: The skill provides specific shell command recipes to perform data retrieval and parsing.
Evidence: references/listening.md contains multiple curl commands piped to jq and xmllint for querying Reddit, Hacker News, and Bluesky.
[DATA_EXPOSURE_AND_EXFILTRATION]: The skill performs network operations to fetch data from well-known services.
Evidence: Fetches JSON and RSS feeds from reddit.com, hn.algolia.com, public.api.bsky.app, and youtube.com. These are recognized as well-known platforms and the operations are used for the skill's stated listening purpose.

social