The Agent Skills Directory

[SAFE]: The core functionality of the skill, including the Python script scripts/agent.py and the SIEM detection rules in SKILL.md, is legitimate and aligns with the stated purpose of API security monitoring.
[PROMPT_INJECTION]: The skill presents a surface for indirect prompt injection due to its processing of untrusted log data.
Ingestion points: scripts/agent.py and the script in SKILL.md ingest external web server access logs.
Boundary markers: The scripts do not implement boundary markers or instructions to isolate log content from system prompts.
Capability inventory: The agent in scripts/agent.py has the capability to perform outbound network requests using the requests library.
Sanitization: Log content is parsed using regular expressions but is not sanitized for potential malicious instructions before being reported or processed.

detecting-api-enumeration-attacks