The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill uses npx to download and execute the latest version of the @openant-ai/cli package from the npm registry. This is a standard method for accessing vendor-provided tools.
[COMMAND_EXECUTION]: The skill uses shell commands via Bash to interact with the platform CLI. These commands are primarily read-only queries used for monitoring, though one command modifies the state of notifications.
[INDIRECT_PROMPT_INJECTION]: The skill processes external content that may be controlled by other users, such as task titles, descriptions, and notification messages.
Ingestion points: Data enters the agent's context through npx @openant-ai/cli@latest notifications list and npx @openant-ai/cli@latest tasks get <taskId> as documented in SKILL.md.
Boundary markers: The instructions do not specify the use of delimiters or instructions to ignore embedded commands within the fetched data.
Capability inventory: The agent has Bash execution capabilities as defined in the allowed-tools frontmatter of SKILL.md.
Sanitization: There is no mention of sanitization or validation of the text content retrieved from the platform before it is processed by the agent.

monitor-tasks