The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of untrusted data from external systems via inbound webhooks and external source proxies, which could potentially introduce malicious instructions into the agent context.
Ingestion points: Untrusted data enters the system through rekor inbound-webhooks and record-types that use external_sources (as described in SKILL.md and references/external-sources.md).
Boundary markers: The skill enforces JSON Schema validation for all records and relationship types to ensure ingested data conforms to expected structures.
Capability inventory: The skill possesses capabilities for SQL execution (rekor sql), writing versioned files (rekor files), and initiating external network requests via triggers (rekor triggers).
Sanitization: The skill uses a structured Filter DSL for data retrieval and recommends using the rekor-sdk for HMAC signature verification of all external communications.
[COMMAND_EXECUTION]: The skill relies on the rekor command-line interface to perform data modeling, schema management, and file operations on the host system.
[EXTERNAL_DOWNLOADS]: The skill instructions specify the installation of the rekor-cli via npm and describe a process for updating the skill by fetching content from the wayai-pro/rekor-skill repository. These resources are provided by the skill's author.
[REMOTE_CODE_EXECUTION]: The rekor CLI includes background update checking for the utility and associated skills. It also supports the use of 'executors,' which are user-deployed HTTP services that execute custom logic on behalf of the Rekor system.
[DATA_EXFILTRATION]: The skill can read local files for upload (rekor files put --file) and configure triggers that dispatch record data to external HTTP endpoints. Additionally, rekor files mount can generate S3-compatible credentials for remote file access.
[PERSISTENCE]: The rekor init command creates a .rekor.yaml configuration file at the repository root to maintain organization and workspace bindings.
[PRIVILEGE_ESCALATION]: The documentation recommends a global npm installation (npm install -g) for the CLI utility, which typically necessitates administrative or root access.

rekor