The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill provides instructions for downloading and installing external packages from GitHub and other remote sources using the pnpx skills add command. This is documented in SKILL.md under Step 4: pnpx skills add <owner/repo@skill> -y.- [REMOTE_CODE_EXECUTION]: The installation process for new skills involves fetching and executing code from external repositories, which grants third-party code the ability to run within the agent's environment. The skill describes the Skills CLI as a package manager that installs modular packages from the open agent skills ecosystem.- [COMMAND_EXECUTION]: The skill utilizes the pnpx command-line utility to perform searches, updates, and installations, which involves executing shell commands with potentially variable arguments. Commands such as pnpx skills find [query], pnpx skills add <package>, and pnpx skills update are present throughout SKILL.md.- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection via its dependency on an external registry. 1. Ingestion points: External search results from skills.sh via the pnpx skills find command. 2. Boundary markers: No explicit boundary markers or warnings about ignoring instructions within skill packages are provided. 3. Capability inventory: The skill can execute shell commands (pnpx), download external code, and perform local installations. 4. Sanitization: No sanitization or verification of the fetched skill metadata or package contents is described before presentation or installation.

find-skills