The Agent Skills Directory

Arbitrary File System Write: The tool includes a save_raw parameter that writes network response data to a path provided in the input.\n
Evidence: The _save_raw_output function in scripts/rest_request.py uses Path(raw_output_path).write_text to save content directly to the filesystem.\n
Context: This enables the agent to store data locally; however, without path restrictions, it could potentially be used to write to or overwrite sensitive files if the input parameters are not carefully controlled.\n- Configurable Network Access: The implementation allows the agent to specify any base_url and path, enabling communication with arbitrary web endpoints.\n
Evidence: The parse_input and execute functions in scripts/rest_request.py do not restrict the target host or protocol, and _build_url allows absolute URLs to override the base configuration.\n
Context: While designed for chemical data retrieval, this flexibility allows the tool to be used to reach other network resources if prompted.\n- Indirect Prompt Injection Surface: The skill retrieves and processes data from external web services, incorporating it into the agent's context.\n
Evidence:\n
Ingestion points: Data is fetched using the requests library in scripts/rest_request.py.\n
Boundary markers: The skill does not currently use specific delimiters to separate external data from system instructions in its output.\n
Capability inventory: The script has the ability to write to the filesystem and make network requests.\n
Sanitization: The _compact function provides structural limiting but does not filter for potential instruction injection patterns.\n
Context: This is a standard consideration for skills that process third-party data, as external content could theoretically influence agent behavior.

pubchem-pug-skill