The Agent Skills Directory

[Indirect Prompt Injection] (HIGH): The skill accepts external content and has the capability to perform public actions (social media posting).
Ingestion points: The post_caption field in SKILL.md is intended for user-provided or agent-generated text.
Boundary markers: There are no delimiters or instructions to ignore embedded commands within the input data.
Capability inventory: The skill uses refly skill run to execute a remote workflow that publishes content to Instagram.
Sanitization: No evidence of sanitization, escaping, or validation of the caption content before it is sent to the remote API.
[External Downloads] (MEDIUM): The skill's core logic is managed by an external provider (refly.ai) and the skill itself is installed from an unverified source.
The installation command refly skill install downloads a skill package from a non-whitelisted domain.
The execution logic relies on a remote workflowId which cannot be locally inspected for security flaws or malicious behavior.

instagram