The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill uses a custom JavaScript script located in 'references/workflow.md' to manage its core naming process. This script is executed via a Workflow tool and orchestrates multiple stages of name generation, scoring, and screening by calling additional AI sub-agents.
[COMMAND_EXECUTION]: During the 'Screen' phase, the skill instructs agents to execute shell commands to check name availability. These commands include 'dig +short NS ' for domain name server checks and 'curl' for package registry checks. While used for legitimate availability lookups, this demonstrates the capability to execute arbitrary commands in the host environment.
[EXTERNAL_DOWNLOADS]: The skill performs network requests to check for name collisions against several well-known package registries and developer platforms. This includes fetching data from 'pypi.org', 'registry.npmjs.org', and 'api.github.com'. These downloads target official, well-known services and are used for availability verification.
[PROMPT_INJECTION]: The skill contains a potential surface for indirect prompt injection within its availability screening logic. Names generated by the model in earlier phases (which are influenced by user-provided briefs) are interpolated directly into prompts that instruct a sub-agent to run shell commands.
Ingestion points: User input in the form of a naming brief (provided as text or a file) enters the process at the start.
Boundary markers: No explicit delimiters or boundary markers are used to isolate the generated candidate names from the surrounding shell command instructions in the 'Screen' phase prompts.
Capability inventory: The sub-agents called by the workflow script have access to shell execution ('dig', 'curl') and file system operations.
Sanitization: While the workflow script applies a regular expression to create 'slugs' for registry checks, the domain availability check instructions ('dig +short NS ') use the raw candidate name string, creating a vector where a maliciously crafted name could attempt to influence command execution.

coin