The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill fetches asset deployment data from an external API (api.xstocks.fi) and uses the resulting addresses as parameters for high-privilege financial operations, including token swaps and transaction execution.
Ingestion points: Asset resolution via curl from https://api.xstocks.fi/api/v2/public/assets (documented in SKILL.md).
Boundary markers: Absent; the instructions tell the agent to find the address in the JSON and use it directly.
Capability inventory: Access to get_swap_quote, emulate_transaction, and send_raw_transaction tools.
Sanitization: No explicit sanitization or verification of the resolved address is performed beyond an optional get_jetton_info check.
[EXTERNAL_DOWNLOADS]: The skill retrieves asset metadata and jetton master addresses from api.xstocks.fi at runtime to determine the targets for swap operations.
[COMMAND_EXECUTION]: The skill uses curl to query the xStocks API. While used for data retrieval rather than script execution, it establishes a dependency on external API responses for transaction parameters.

ton-xstocks