The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external, untrusted sources (WeChat article URLs).
Ingestion points: The fetch_article function in scripts/scraper.py downloads HTML content from user-provided URLs.
Boundary markers: The skill does not implement explicit boundary markers or instructions to the agent to ignore potentially malicious instructions embedded within the scraped article content.
Capability inventory: The skill utilizes the requests library for network access and the os and open functions to write files to the local filesystem.
Sanitization: The skill includes basic filename sanitization in scripts/main.py to prevent path traversal, but it does not sanitize the body of the article for embedded instructions before conversion to Markdown.
[COMMAND_EXECUTION]: The skill instructions guide the user to execute shell commands for setup and operation.
Evidence: SKILL.md contains instructions to run pip install -r requirements.txt and python main.py <URL>. While these are standard for this type of tool, they represent the execution of local scripts and dependency installation.

wechat-article-spider