The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill fetches documentation at runtime from the vendor's official domain (paradedb.com) using the curl command. This is used to provide the agent with up-to-date information on ParadeDB features and SQL syntax.
[COMMAND_EXECUTION]: The skill includes a bash script at scripts/paradedb-docs which is executed by the agent to perform network requests. The script contains a check to ensure requested paths end in .md or .txt, providing a basic level of input validation.
[INDIRECT_PROMPT_INJECTION]: The skill ingests external text from the ParadeDB documentation site into the agent's active context, creating a potential attack surface where instructions embedded in the documentation could influence the agent. * Ingestion points: Documentation content is retrieved via scripts/paradedb-docs from https://www.paradedb.com/docs/. * Boundary markers: The skill instructions in SKILL.md do not specify delimiters or instructions to ignore potential commands embedded within the retrieved documentation content. * Capability inventory: The skill encourages the agent to perform database operations, including executing SQL queries, creating indexes using the pg_search extension, and modifying database configurations. * Sanitization: There is no evidence of content sanitization or filtering applied to the fetched documentation before it is processed by the agent.

paradedb-skill