The Agent Skills Directory

[COMMAND_EXECUTION]: The documentation mentions using npx atmn init to initialize the project and generate configuration files. This is a standard project initialization pattern for the vendor's command-line interface.
[EXTERNAL_DOWNLOADS]: The skill references the installation and use of autumn-js for Node.js environments and autumn_sdk for Python environments. These are the official SDKs provided by the vendor for interacting with their service.
[DATA_EXFILTRATION]: The skill contains instructions for making network requests to api.useautumn.com. These calls are necessary for the skill's primary purpose of checking feature entitlements and tracking usage data via the vendor's official API.
[INDIRECT_PROMPT_INJECTION]: The skill processes external identifiers such as customerId and featureId which may originate from untrusted sources. However, the documentation explicitly instructs developers to perform checks on the backend and provides guidance on secure integration, which mitigates the risk of unauthorized access through input manipulation.

autumn-gating