The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill utilizes WebFetch to retrieve README files, changelogs, and source code from the official OpenTelemetry GitHub repositories (github.com/open-telemetry). It also performs npm view queries against the official npm registry to check for the latest package versions. These sources are well-known, official, and trusted within the developer community.
[INDIRECT_PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection because it ingests and processes content from external sources to provide responses.
Ingestion points: Technical documentation, changelogs, and source files are fetched from raw.githubusercontent.com/open-telemetry/... and opentelemetry.io in both SKILL.md and references/declarative-setup.md.
Boundary markers: The skill does not explicitly define delimiters or instructions to ignore potential injections within the fetched remote content.
Capability inventory: The agent has the capability to fetch remote content using WebFetch and query package information via npm view.
Sanitization: There is no evidence of sanitization, validation, or strict schema enforcement for the content retrieved from external URLs.

otel-js