The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill ingests medical preprint data (titles, abstracts, and full-text content) from the Valyu API. Because this external content is directly integrated into the agent's context without explicit boundary markers or sanitization, it presents a surface for potential indirect prompt injection if the source papers contain maliciously formatted text.
Ingestion points: scripts/search.mjs fetches results from api.valyu.ai.
Boundary markers: Absent; instructions do not specify delimiters for external content.
Capability inventory: scripts/search.mjs performs network requests (fetch) and file system operations (writeFileSync for config management).
Sanitization: Absent; raw JSON results from the API are processed directly.
[COMMAND_EXECUTION]: The skill uses a Bash wrapper and a Node.js script to interact with the system and the Valyu API. This includes reading/writing to the local filesystem (~/.valyu/config.json) and executing commands to perform searches and setup authentication.

medrxiv-search