The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill provides instructions and automated checks for installing the Grok CLI from x.ai and various Printing Press utilities. These downloads originate from well-known services and the author's official repositories.
[COMMAND_EXECUTION]: To provide its research capabilities, the skill shells out to several user-installed or vendored CLI tools, including yt-dlp for YouTube, gh for GitHub, and grok for X. It also implements an internal bounded_get utility that runs network requests in isolated child processes to enforce strict time and resource boundaries.
[DATA_EXFILTRATION]: The skill includes an optional feature to publish research findings and a personal library to a hosted service at ht-ml.app. This is a core part of its stated purpose for creating shareable reports and requires explicit user opt-in and consent.
[INDIRECT_PROMPT_INJECTION]: The engine retrieves untrusted content from dozens of social and web sources (Reddit, X, YouTube transcripts). It mitigates injection risks by using structured data boundaries, fencing untrusted content with security notices (<untrusted_content>), and implementing specific defanging logic in its renderers to prevent source content from forging engine markers.
[SAFE]: The skill implements several advanced security features:
Subprocess Isolation: In scripts/lib/grok_x.py, it stages a temporary home directory for the Grok CLI child process to prevent it from reading sensitive user configuration or SSH keys.
Automated Auditing: In scripts/lib/grok_audit.py, it performs a local tool-boundary audit of new Grok CLI builds before use, ensuring they do not have access to unauthorized local system tools.
Credential Redaction: The HTTP and logging layers include logic to detect and redact API keys and session tokens before they are recorded in debug fixtures or logs.
Privacy Controls: Local file evidence (corpus source) is explicitly excluded from publishing and exported data unless the user provides a separate privacy opt-in.

last30days