The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill uses npx to download the package @claude-flow/plugin-iot-cognitum@latest from the npm registry. This package does not originate from a recognized trusted organization.
[REMOTE_CODE_EXECUTION]: By using npx, the skill executes code downloaded from a remote repository at runtime. The use of the @latest version tag introduces a supply chain risk where a compromised version of the package could be automatically installed and executed.
[COMMAND_EXECUTION]: The skill executes shell commands using the npx utility to run logic from the downloaded package.
[INDIRECT_PROMPT_INJECTION]: The DEVICE_ID argument provided by the user is directly interpolated into a shell command: cognitum-iot anomalies DEVICE_ID.
Ingestion points: The DEVICE_ID argument is accepted from user input.
Boundary markers: None present in the command template.
Capability inventory: Shell execution via Bash is enabled.
Sanitization: No sanitization or validation of the DEVICE_ID is specified before it is passed to the shell. This creates a risk of command injection if a user provides a malicious string (e.g., ; rm -rf /).

iot-anomalies