The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs the installation of the @upstash/cli package via the npm registry. This package is an official resource provided by the vendor (Upstash) for interacting with their developer API.
[COMMAND_EXECUTION]: The skill's primary purpose is to facilitate the execution of shell commands using the upstash CLI tool. It covers a wide range of administrative tasks including service provisioning, authentication, and resource configuration.
[INDIRECT_PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface because it constructs shell commands by interpolating user-provided inputs such as resource names, IDs, and configuration parameters.
Ingestion points: Resource identifiers (e.g., --db-id, --index-id, --bucket-id) and names (e.g., --name) provided by the user are used as arguments for terminal commands in SKILL.md.
Boundary markers: The instructions do not specify explicit delimiters or boundary markers to isolate user-provided strings within the generated shell commands.
Capability inventory: The skill provides access to significant management capabilities through the upstash CLI and includes examples of piping data to auxiliary tools like jq and aws.
Sanitization: There are no documented sanitization or validation steps to ensure that user-supplied identifiers do not contain shell metacharacters or command injection sequences.

upstash-cli