The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill ingests user-supplied text to perform voice synthesis via the MeloTTS API, which introduces an indirect injection vector.
Ingestion points: The text parameter in the API request body sourced from user prompts.
Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the skill.
Capability inventory: Network operations via curl, requests, and fetch; file system access for writing and reading the API key file.
Sanitization: No sanitization or validation of the input text is implemented.
[COMMAND_EXECUTION]: The skill instructs the agent to use chmod 600 on the local ~/.pixazo/api-key file to protect the user's credentials, aligning with security best practices.
[EXTERNAL_DOWNLOADS]: The agent is directed to fetch technical documentation from a vendor-controlled URL (https://www.pixazo.ai/models/melotts.md) to resolve model-specific parameters.

melotts