The Agent Skills Directory

[SAFE]: The skill is a legitimate connector authored by Zapier for interacting with the Dropbox API. It contains comprehensive documentation and unit tests for each tool.
[EXTERNAL_DOWNLOADS]: The skill makes network requests to official Dropbox API endpoints (api.dropboxapi.com and content.dropboxapi.com) to manage files, folders, and sharing settings. These domains are well-known and expected for this skill's functionality.
[EXTERNAL_DOWNLOADS]: The uploadFile tool retrieves content from a user-specified URL via globalThis.fetch to perform its primary function of uploading that content to Dropbox. This behavior is documented and intentional.
[COMMAND_EXECUTION]: The cli.js entry point uses spawnSync to run the connector's own local scripts (cli.ts or dist/cli.js). This is a standard mechanism used to support different Node.js environments and runtime options.
[DATA_EXFILTRATION]: No unauthorized data exfiltration patterns were detected. Data movement (e.g., uploading to Dropbox or fetching a file for upload) is consistent with the skill's stated purpose and targets official vendor domains or user-supplied URLs.

dropbox