The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: Suggests installing official SDKs for Node.js, Python, Ruby, and PHP (e.g., npm install orshot, pip install orshot, gem install orshot). These are legitimate vendor resources required for interacting with the platform.
[COMMAND_EXECUTION]: References the orshot-cli tool which can be executed via npx for terminal-based automation.
[DATA_EXFILTRATION]: Documents the documented transmission of data to the Orshot API (api.orshot.com) for processing. This is the core purpose of the skill and represents authorized data transfer to the service provider.
[PROMPT_INJECTION]: The skill features an AI-driven generation capability via the .prompt modification parameter. This serves as a surface for indirect prompt injection if untrusted external data is passed to these fields without oversight.
Ingestion points: User-controlled data in the modifications payload, specifically fields using .prompt for text/image generation or .href for PDF links.
Boundary markers: None present; the skill does not define delimiters or provide instructions for the agent to isolate external content.
Capability inventory: Network operations to api.orshot.com.
Sanitization: None present; the documentation does not describe sanitization or validation steps for content passed to the AI generation parameters.

orshot