The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill directs users to add https://rube.app/mcp as an MCP server. This is a well-known service endpoint for the Rube MCP tool used to bridge Square API capabilities to the agent. No code is directly executed from this URL within the skill itself.
[DATA_EXPOSURE]: The skill manages Square data (payments, orders, invoices) but does so through authorized tool calls (SQUARE_LIST_PAYMENTS, etc.). It includes clear instructions on 'Effect boundary' to ensure the agent resolves specific account environments and IDs before performing mutations, which is a positive security practice.
[COMMAND_EXECUTION]: No shell command execution or arbitrary subprocess spawning was detected. All operations are performed through predefined tool slugs.
[INDIRECT_PROMPT_INJECTION]: The skill ingests data from Square APIs (orders, payments). While it contains no explicit sanitization logic, it is classified as low risk because it uses structured tool outputs and focuses on transactional data rather than processing large blocks of untrusted natural language text.

square-automation