The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/scrape_amazon.py utilizes the subprocess.check_call function to programmatically execute system commands. Specifically, it invokes the Python package manager (pip) to install dependencies.
[EXTERNAL_DOWNLOADS]: Both scripts/setup.sh and scripts/scrape_amazon.py are designed to download and install external Python packages (requests, beautifulsoup4) from public registries during setup or runtime.
[INDIRECT_PROMPT_INJECTION]: The skill functions as a data ingestion surface by retrieving product titles, rankings, and trends from external sources.
Ingestion points: Data is fetched from amazon.com domains via web scraping and from api.sellersprite.com via API calls, both of which are attacker-controllable environments (e.g., via malicious product listings).
Boundary markers: The instructions do not define specific delimiters or instructions for the agent to disregard potential prompts embedded within the scraped product data.
Capability inventory: The skill possesses network access capabilities and the ability to execute shell commands for environment setup.
Sanitization: The script performs basic parsing but does not explicitly sanitize or filter the content of product titles or descriptions for potential injection patterns before passing them to the agent context.

amazon-movers-shakers