The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs the installation of the bird CLI from third-party sources (NPM package @steipete/bird and Homebrew tap steipete/tap/bird). These are external dependencies not directly managed by the skill author.
[DATA_EXFILTRATION]: To function, the tool accesses sensitive browser profile data and cookie databases (e.g., via the --chrome-profile-dir flag) to retrieve authentication tokens for X/Twitter.
[COMMAND_EXECUTION]: The skill utilizes shell commands to interact with the system and network, including posting updates and uploading media files from the local filesystem.
[PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection because it ingests and processes untrusted data from an external social media platform.
Ingestion points: Untrusted data enters the agent's context through commands like bird read, bird home, and bird search as defined in SKILL.md.
Boundary markers: The instructions lack delimiters or explicit directives to ignore instructions embedded within the retrieved tweet content.
Capability inventory: The skill provides write-access tools such as bird tweet, bird reply, and bird follow (documented in SKILL.md).
Sanitization: There is no evidence of sanitization or filtering of the content retrieved from the external source.

bird