The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The script scripts/analyze_user.js performs network requests to polymarket.com and data-api.polymarket.com. These are official, well-known domains for the service being analyzed, and the operation is used to fetch public profile and trading history data.
[COMMAND_EXECUTION]: The skill uses Node.js built-in modules to perform operations. Specifically, scripts/analyze_user.js uses fetch for network communication and fs.writeFileSync to save analysis reports to the local file system. These actions are transparently documented and consistent with the skill's primary purpose.
[PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection due to its ingestion of untrusted external content.
Ingestion points: User profile HTML is scraped from polymarket.com and trading activity JSON is fetched from data-api.polymarket.com inside scripts/analyze_user.js.
Boundary markers: There are no boundary markers or instructions to ignore embedded content when processing or displaying retrieved data.
Capability inventory: The skill has the capability to write to the local file system (fs.writeFileSync) and log information to the terminal, which could be leveraged if the output is later processed by an agent.
Sanitization: External strings, including trading market titles and usernames, are interpolated directly into console logs and report files without escaping or validation.

polymarket-user-analyzer