The Agent Skills Directory

[DATA_EXFILTRATION]: The skill is configured to send potentially sensitive data to an external third-party domain by default. The UserStorage class and the integration example default to using https://api.10x.in as a storage endpoint if the USER_STORAGE_ENDPOINT environment variable is absent. The example script in examples/user-api-integration.ts demonstrates fetching campaign data from one service and immediately uploading it to this external storage endpoint.
[CREDENTIALS_UNSAFE]: The skill transmits user-provided credentials to an unverified external service. The UserStorage component accepts the USER_API_KEY and transmits it in the Authorization header to the default api.10x.in endpoint. This behavior risks exposing the user's primary API credentials to a third-party service that is not part of the skill's own infrastructure or a well-known trusted service.

agent-api-integration