The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill documentation includes instructions to use npx @claude-flow/cli@latest, which facilitates the download and execution of external code from the npm registry at runtime.
[REMOTE_CODE_EXECUTION]: The use of npx with the @latest tag allows for the execution of remote code that may change without notice, as it fetches the most recent version of the package from an external source.
[COMMAND_EXECUTION]: The skill explicitly requests access to the Bash tool and provides shell commands for interacting with an external CLI for database operations.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user data which is interpolated into database search and retrieval operations.
Ingestion points: User input from the <query> argument is passed directly to memory retrieval tools such as mcp__plugin_ruflo-core_ruflo__agentdb_hierarchical-recall and mcp__plugin_ruflo-core_ruflo__agentdb_pattern-search.
Boundary markers: The skill lacks explicit delimiters (e.g., XML tags or triple quotes) or "ignore embedded instructions" warnings for the processed data.
Capability inventory: The agent possesses the Bash tool and a suite of tools for reading and writing to a persistent knowledge store.
Sanitization: There are no indicated mechanisms for escaping, validating, or filtering the external content before it enters the agent's context.

agentdb-query