The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs users to install and execute the iran-quake-mcp package using the uvx tool. This package is hosted on a public registry and is executed in the user's environment to provide the skill's functionality.
[METADATA_POISONING]: The Rules section of the skill contains highly inconsistent information that does not match the skill's stated purpose. It includes instructions for currency conversion ('Prices are Toman') and e-commerce limitations ('no login, basket, booking, order or payment') which appear to be erroneously copied from a different skill template.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external seismological sources such as the Iranian Seismological Center (IRSC), USGS, and EMSC. The analysis identified a lack of explicit sanitization or boundary instructions for the agent when handling this external data, creating a potential surface for indirect prompt injection if those sources were to provide malicious content.

iran-quake