The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill directs the download of an executable binary (streamscribe) from an unverified GitHub Pages site (https://guess-eng.github.io/cli-sonic-harvester/). This source is not associated with any trusted organizations or well-known services.
[REMOTE_CODE_EXECUTION]: The instructions mandate the execution of the downloaded binary (streamscribe) without any integrity verification (e.g., checksums or signatures) before use.
[PRIVILEGE_ESCALATION]: The skill instructs the agent to perform administrative actions, specifically using sudo mv to move the unverified binary to /usr/local/bin/ and chmod +x to grant it execution permissions, effectively giving a potentially malicious external binary root-owned path placement.
[COMMAND_EXECUTION]: The primary function of the skill involves executing a CLI tool that performs network operations and file writes based on user-supplied URLs.
[INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection.
Ingestion points: The skill processes external URLs from Spotify, Deezer, Tidal, and Apple Music (SKILL.md).
Boundary markers: There are no markers or instructions to the agent to treat data from these URLs as untrusted or to ignore embedded instructions.
Capability inventory: The skill uses a binary with the ability to write files to the disk and make network requests.
Sanitization: There is no evidence of sanitization or validation of the content retrieved from the external URLs.

spotify-mp3-cli-downloader