The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill provides instructions to use npx symone-cli for route searches. This command downloads and executes a Node.js package from the public npm registry at runtime, which is a mechanism for executing code from an external source.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from the SYMONE API and MCP server, which constitutes an attack surface for indirect prompt injection.
Ingestion points: The skill retrieves dynamic trip data, route information, and city names from https://symone.fr/api-proxy/v1 and the MCP server at https://symone.fr/mcp (SKILL.md).
Boundary markers: There are no explicit instructions or delimiters defined to separate external API data from the agent's internal instructions.
Capability inventory: The skill has the capability to perform network operations (API calls) and execute shell commands via the CLI (SKILL.md).
Sanitization: The instructions do not specify any validation or sanitization steps for the data returned by the API before it is presented to the user or used to inform subsequent agent actions.
[EXTERNAL_DOWNLOADS]: The skill fetches data and configuration from external endpoints, specifically https://symone.fr/mcp and https://symone.fr/api-proxy/v1 (SKILL.md).
[COMMAND_EXECUTION]: The skill references the use of a Command Line Interface (CLI) tool symone-cli to perform searches, which involves executing local shell commands.

symone-trip-planner