The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill fetches data from multiple untrusted external social media and web sources (such as Twitter, Reddit, and TikTok) for processing by the agent. This creates a potential surface for indirect prompt injection attacks where malicious instructions hidden in external content could influence agent behavior.
Ingestion points: Multiple social media retrieval APIs, including twitter.tweet_detail and reddit.api_v1_reddit_app_fetch__post__details as documented in various guide files.
Boundary markers: Absent; there are no specific instructions for the agent to treat fetched content as untrusted or to use isolation delimiters.
Capability inventory: The skill includes powerful capabilities such as sandbox run for remote command execution and x-official.2_tweets for posting content to social platforms.
Sanitization: External content is processed without explicit sanitization or filtering mentioned in the provided instructions.
[DYNAMIC_EXECUTION]: The skill provides a 'Managed Sandbox Compute' feature that allows the agent to execute arbitrary code and shell commands in a remote cloud environment.
Evidence: Extensively documented in SKILL.md and guides/sandbox.md (e.g., npx xapi-to sandbox run --command ...). While intended for legitimate development and analysis tasks, this functionality represents a high-capability attack surface.
[COMMAND_EXECUTION]: The skill relies on the execution of its own CLI tool via npx and includes a bash script for automating specific workflows.
Evidence: All primary operations use the npx xapi-to command. The file scripts/download_tweet_videos.sh is a utility script that uses standard tools like curl, jq, and file to process media content from Twitter.
[EXTERNAL_DOWNLOADS]: The skill and its associated scripts perform downloads from external domains as part of their intended functionality.
Evidence: The download_tweet_videos.sh script retrieves MP4 files from video.twimg.com. The sandbox functionality may also download external dependencies or resources during its lifecycle based on agent commands.

xapi