The Agent Skills Directory

EXTERNAL_DOWNLOADS (LOW): The skill recommends installing several external Node.js packages to set up the testing environment. While these are appropriate for the skill's primary purpose of testing Midnight contracts, the organizations are not within the explicitly trusted list.
Evidence: npm install -D @midnight-ntwrk/compact-simulator vitest in SKILL.md.
Evidence: npm install -D @midnight-ntwrk/compact-simulator @midnight-ntwrk/midnight-js-network-id vitest in references/simulator-setup.md.
INDIRECT_PROMPT_INJECTION (LOW): The skill is designed to ingest and process contract artifacts (e.g., contract.json), which could potentially contain malicious instructions if provided by an adversary. However, the current scope is limited to unit testing logic.
Ingestion points: Loading contract.json or contractArtifact in SKILL.md and references/simulator-setup.md.
Boundary markers: None present to delimit or ignore instructions within the contract artifacts.
Capability inventory: Includes executing tests via npm test as described in SKILL.md.
Sanitization: No evidence of sanitization for ingested contract data.
COMMAND_EXECUTION (SAFE): The skill includes standard commands for running tests, which is consistent with its stated purpose.
Evidence: npm test instructions in SKILL.md.

testing