The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill provides functionality to download and list files from remote servers, establishing a surface for ingesting untrusted data.
Ingestion points: The getFile and listDir actions in SKILL.md allow the agent to interact with and retrieve remote content.
Boundary markers: No specific boundary markers or 'ignore' instructions are defined for the agent when processing downloaded content.
Capability inventory: The skill enables file system writes (putFile, createDir, getFile), network operations (FTP/SFTP), and file system reads.
Sanitization: The instructions do not define sanitization logic for data retrieved from remote servers.
[CREDENTIALS_UNSAFE]: Documentation examples contain references to sensitive file paths used for authentication.
Evidence: The SFTP authentication example in SKILL.md uses /home/app/.ssh/id_rsa as the value for the privateKeyFile parameter.
Context: The documentation explicitly advises users to avoid hardcoding credentials and to use environment variables instead.
[EXTERNAL_DOWNLOADS]: The installation section provides instructions to download and install a vendor module.
Evidence: The command install-bx-module bx-ftp is provided in SKILL.md.
Context: The resource is part of the ortus-boxlang vendor ecosystem.

bx-ftp