The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands to run a local Python script (scripts/reorganize_topic_bookmarks.py) for processing and reorganizing bookmark data.
[INDIRECT_PROMPT_INJECTION]: The skill processes external HTML bookmark files, which acts as an ingestion point for untrusted data that could potentially contain malicious instructions.
Ingestion points: The scripts/reorganize_topic_bookmarks.py script reads a user-specified HTML file via the --input parameter in SKILL.md.
Boundary markers: The instructions do not specify any delimiters or warnings to the agent regarding potential instructions embedded within the bookmark titles or folder names.
Capability inventory: The skill has the capability to read and write files on the local filesystem and execute shell commands via the included Python script.
Sanitization: The Python script uses html.escape and html.unescape for data formatting, but does not implement specific sanitization or filtering to prevent prompt injection from the extracted bookmark content.

topic-bookmarks-reorganizer-cn