The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill fetches package information from the Python Package Index (PyPI) and retrieves documentation, changelogs, and configuration schemas from the official OpenTelemetry GitHub organization repositories.
[COMMAND_EXECUTION]: Provides instructions for installing packages via pip and using system tools like grep to audit project source code for existing instrumentation patterns.
[INDIRECT_PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by ingesting external data that is then processed by the agent without specific sanitization.
Ingestion points: WebFetch operations targeting pypi.org and raw.githubusercontent.com/open-telemetry/* in SKILL.md, references/breaking-changes.md, and references/declarative-setup.md.
Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded commands within the fetched external data.
Capability inventory: The skill environment allows for pip install, execution of the opentelemetry-bootstrap installer, and local file searches via grep (documented in references/instrumentation-libraries.md).
Sanitization: There is no evidence of filtering or escaping logic applied to the remote content before it is processed by the agent.

otel-python