The Agent Skills Directory

[DATA_EXPOSURE_AND_EXFILTRATION]: The scripts/uploadFile.ts script performs network operations to arbitrary, user-provided URLs using globalThis.fetch(input.file_url). This is used to download file bytes for subsequent upload to Dropbox. While this is the intended purpose of the tool, it involves network requests to non-whitelisted domains.
[INDIRECT_PROMPT_INJECTION]: The scripts/getFileContents.ts script reads text content from Dropbox files directly into the agent's context. This creates a surface for indirect prompt injection if the files being processed contain malicious instructions.
Ingestion points: scripts/getFileContents.ts reads data from the Dropbox /files/download endpoint.
Boundary markers: The script does not implement specific delimiters or warnings to the LLM to ignore instructions within the fetched file content.
Capability inventory: The skill has significant capabilities, including file creation, deletion, moving, and sharing across the Dropbox account.
Sanitization: The script decodes the content as UTF-8 but does not perform additional sanitization or filtering to prevent instruction injection.

dropbox