The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides practical examples for using common shell utilities, including cwebp, mogrify, jpegoptim, and curl, to perform image optimization and metadata extraction. These commands are typical for developer and marketing workflows.
[INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to fetch content from external websites via curl to identify image tags. This establishes an ingestion point for potentially untrusted data that could contain malicious instructions. 1. Ingestion points: The standard output of the curl command when analyzing external URLs in SKILL.md. 2. Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded content in the captured output. 3. Capability inventory: The skill utilizes network access through curl and local execution of image processing binaries. 4. Sanitization: Filtering is performed via grep -oP patterns, which reduces the volume of data but does not provide robust protection against sophisticated prompt injection attacks embedded in the source HTML.

image