The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes curl commands to interact with the Stipple API (stipple.sh) for company resolution, tender searches, and capability matching. These operations are essential to the skill's primary function.
[INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources, including third-party API responses and user-supplied company URLs or descriptions. This creates a potential surface for indirect prompt injection, where malicious instructions embedded in external content could influence the agent's behavior.
Ingestion points: User-provided company URLs and descriptions; API responses from stipple.sh.
Boundary markers: None identified in the provided instructions.
Capability inventory: Uses curl for network requests.
Sanitization: No specific sanitization or validation of the external content is mentioned.
[DATA_EXPOSURE]: The skill sends user-provided data, such as company URLs and capability descriptions, to the third-party service stipple.sh. The author has included an explicit safety warning advising users to obtain approval before sharing private or non-public information with the hosted service.

find-matching-tenders