The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides shell command recipes using curl, jq, and xmllint in references/listening.md to automate the collection and parsing of data from social media platforms. These commands allow the agent to perform real-time social listening and triage tasks by interacting with external JSON and RSS endpoints.
[EXTERNAL_DOWNLOADS]: The agent is instructed to fetch content from several external domains including reddit.com, hn.algolia.com, public.api.bsky.app, and youtube.com. These interactions are with well-known technology services for the purpose of social monitoring and do not involve sensitive local file access or exfiltration.
[PROMPT_INJECTION]: The social listening functionality introduces an indirect prompt injection surface by processing untrusted content from the web to generate engagement drafts and analysis.
Ingestion points: The skill pulls posts and comments from external APIs via curl commands defined in references/listening.md.
Boundary markers: The skill lacks explicit instructions or markers to distinguish between system instructions and the untrusted content retrieved from external sources, which could lead to the agent following instructions embedded in social media posts.
Capability inventory: The agent has shell access for data fetching and the ability to draft replies based on analyzed content, creating a potential path for influence if a malicious post is processed.
Sanitization: The skill does not define specific sanitization or filtering protocols for the external data before it is presented to the agent for analysis.

social