The Agent Skills Directory

[SAFE]: The skill serves as a documentation guide for a manual setup process. It specifically instructs the user to run the setup command in their own terminal rather than attempting to automate it, which ensures that sensitive inputs like the Client Secret are handled securely by the user and the platform's native keychain. All URLs provided point to official Asana developer resources or the local loopback address used for standard OAuth flows.
[INDIRECT_PROMPT_INJECTION]: The skill identifies a template variable $1 for inserting a user-provided Client ID into the printed instructions. While this represents an ingestion point for untrusted data, the skill lacks any capabilities (such as shell execution, file writes, or network requests) that could be exploited via this input. The agent simply echoes the value back as part of a text guide, posing no risk to the system's integrity.

asana-setup