The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses the membrane CLI to interact with Squarespace. This involves executing commands like membrane action run and membrane request to manage store data and configurations.
[EXTERNAL_DOWNLOADS]: The instructions guide the user to install the official @membranehq/cli package from the npm registry. This package is owned by the skill's vendor and is required for the skill's operation.
[PROMPT_INJECTION]: The skill features a surface for indirect prompt injection as it ingests data from Squarespace (e.g., form submissions, product descriptions, or customer names) which could contain untrusted instructions.
Ingestion points: Data returned from the Squarespace API via membrane action run or membrane request documented in SKILL.md.
Boundary markers: None specified in the instructions.
Capability inventory: Shell command execution via the membrane CLI as described across the SKILL.md file.
Sanitization: The skill encourages the use of the --json flag to ensure structured data handling, which helps mitigate some injection risks.

squarespace