The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructs the agent to execute shell scripts and Node.js code (scripts/search and scripts/search.mjs). It also provides a specific command to dynamically locate these scripts in the local filesystem using the find tool.
[PROMPT_INJECTION]: The skill processes untrusted search results from the Valyu API, creating a vulnerability surface for indirect prompt injection where malicious content in search results could attempt to influence the agent's behavior.
Ingestion points: External data from the api.valyu.ai endpoint (including drug mechanisms, interactions, and full-text content) is ingested into the agent's context during processing.
Boundary markers: Absent. The documentation does not provide delimiters or specific instructions for the agent to treat API results as untrusted data.
Capability inventory: The agent has the capability to execute commands via the provided scripts and perform network operations.
Sanitization: Absent. There is no mention of sanitization or validation of the content retrieved from the external API before it is utilized by the agent.

drugbank-search