The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill facilitates the installation of multiple external companion skills from various individual GitHub users (AgriciDaniel, addyosmani, aaron-he-zhu, coreyhaines31, jonathimer) using the npx skills add command. Although the skill mandates explicit user confirmation before executing any install command, this involves downloading and running code from untrusted third-party repositories. It also installs a security tool from the official repository of a well-known security firm and a French humanizer from the vendor's own repository.
[EXTERNAL_DOWNLOADS]: Fetches a humanizer tool from a third-party GitHub repository (https://github.com/blader/humanizer) at runtime to process marketing copy.
[INDIRECT_PROMPT_INJECTION]:
Ingestion points: Site content fetched via curl for SEO and security audits (Phases 4-8), competitor analysis data (Phase 2), and external directory listing status checks (Phase 11).
Boundary markers: The instructions do not define explicit boundary markers or 'ignore embedded instructions' warnings when processing the data fetched from audited sites.
Capability inventory: The skill has Write permissions to create and modify local project files (robots.txt, manifest.json, TONE.md, and agent configuration files) and can invoke external sub-skills.
Sanitization: There is no evidence of sanitization or filtering logic applied to the external content before it is processed by the agent or used to generate local files.
[COMMAND_EXECUTION]: Executes a wide range of shell commands, including dig for DNS verification, curl for site audits and API interaction, npx for tool execution, and openssl for certificate checks. While these are necessary for the skill's primary function, they involve significant interaction with the host environment.
[DATA_EXFILTRATION]: Performs diagnostic network checks against the vendor's domain (https://hogpost.samber.dev/decide) to verify CORS configuration for analytics proxies. This uses the vendor's official infrastructure.

site-launch-checklist