The Agent Skills Directory

Arbitrary File Write Consideration: The script scripts/rest_request.py includes functionality to save network response data to a file path provided in the input via the raw_output_path field. The _save_raw_output function performs file writing without restricted directory validation, which could potentially allow overwriting sensitive configuration files or creating persistence mechanisms if mismanaged. \n- Flexible Network Request Configuration: The implementation allows for arbitrary base_url and path parameters, which permits requests to any internet-accessible or internal resource. This introduces a potential Server-Side Request Forgery (SSRF) risk if the agent is directed to unintended targets. \n- Custom Request Headers: The tool accepts a headers object that is directly applied to the HTTP session. This functionality allows the injection of custom headers, which could be misused to facilitate unauthorized access or session manipulation if the input is influenced by untrusted sources.

human-protein-atlas-skill