The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides Python scripts (scripts/calculate_metrics.py and scripts/analyze_performance.py) intended for campaign analysis. These scripts perform standard mathematical calculations and data processing using local JSON input files provided by the user. There is no evidence of arbitrary command execution, privilege escalation, or shell injection vulnerabilities.
[DATA_EXFILTRATION]: No network operations or external data exfiltration patterns were detected. The scripts operate entirely on local data structures and output analysis to the console or provided JSON artifacts. All calculated metrics (ROI, Engagement Rate) are derived from the input assets/sample_input.json.
[INDIRECT_PROMPT_INJECTION]: The skill processes social media data (post IDs, likes, comments). While this is technically an ingestion point for external data, the analysis is performed via static Python logic with no interpolation into LLM prompts that could lead to instruction override. The capability inventory is limited to mathematical reporting.
[REMOTE_CODE_EXECUTION]: No remote code execution patterns were found. The skill does not use curl, wget, or any other mechanism to download or execute code from the internet. All logic is contained within the local Python files.
[OBFUSCATION]: The skill's documentation and code are transparent and well-documented. No base64, hex-encoding, zero-width characters, or homoglyph attacks were detected in any of the analyzed files.

social-media-analyzer