The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill fetches and executes the @claude-flow/plugin-agent-federation package from the official npm registry at runtime using npx.
[COMMAND_EXECUTION]: The skill executes the ruflo-federation CLI tool via npx to query structured logs.
[PROMPT_INJECTION]: The skill interpolates user-provided arguments (compliance mode, date range, and severity) directly into a shell command. This creates a surface for indirect prompt injection or command injection. (1) Ingestion points: User-supplied parameters parsed in the SKILL.md instructions. (2) Boundary markers: No explicit delimiters or instructions are provided to the agent to treat this data as non-executable. (3) Capability inventory: The skill utilizes the Bash tool to execute system commands. (4) Sanitization: No explicit validation or filtering logic is defined for the interpolated values.

federation-audit