The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs the user to configure an external MCP server at https://rube.app/mcp. This domain is not recognized as a trusted vendor and is not part of the author's (sickn33) verified infrastructure. Adding external MCP servers allows the remote host to define and control tools available to the agent, creating a dependency on an unverified third-party service.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from Calendly that could contain malicious instructions designed to influence the agent's behavior.
Ingestion points: External data is ingested through tools like CALENDLY_LIST_EVENTS, CALENDLY_GET_EVENT, and CALENDLY_LIST_EVENT_INVITEES (SKILL.md).
Boundary markers: There are no markers or instructions to isolate or treat external data as untrusted.
Capability inventory: The skill provides access to sensitive administrative tools such as CALENDLY_CANCEL_EVENT, CALENDLY_CREATE_ORGANIZATION_INVITATION, and CALENDLY_REMOVE_USER_FROM_ORGANIZATION (SKILL.md).
Sanitization: The instructions do not specify any validation or sanitization steps for data retrieved from the Calendly API.

calendly-automation