The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill uses the npx package runner to download and execute the skills utility from the npm registry for management tasks.
[COMMAND_EXECUTION]: Provides commands for searching, listing, and installing skills through the CLI. These actions are restricted to the npx skills * scope as defined in the skill's allowed-tools metadata.
[INDIRECT_PROMPT_INJECTION]: The skill ingests external data from the skill registry when searching or listing available tools. 1. Ingestion points: Results from npx skills search and npx skills list which display third-party descriptions. 2. Boundary markers: Absent in the instructions. 3. Capability inventory: Installation of additional code via npx skills add. 4. Sanitization: Relies on registry-side safety checks and the agent's evaluation of search results.

related-skill