The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill documents an installation procedure that fetches a setup script from xAI's official domain via curl -fsSL https://x.ai/cli/install.sh | bash.
[EXTERNAL_DOWNLOADS]: The skill references downloading the Grok CLI through the official @xai-official/grok package on the NPM registry and the x.ai domain.
[COMMAND_EXECUTION]: The skill instructions utilize the terminal() tool to invoke the grok CLI, along with standard development tools like git, tmux, and gh for managing repositories and pull requests.
[INDIRECT_PROMPT_INJECTION]: The skill demonstrates a surface for indirect prompt injection where user-supplied tasks are interpolated into the grok command line.
Ingestion points: User-provided strings are passed as arguments to the grok -p command as shown in the examples within SKILL.md.
Boundary markers: Commands use single quotes to delimit the prompt (e.g., grok -p 'Add a dark mode toggle').
Capability inventory: The skill uses the terminal() tool to execute grok, an autonomous coding agent with full file system access and shell execution capabilities.
Sanitization: The documented examples do not include explicit input validation or sanitization for the prompts passed to the CLI.

grok