The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill utilizes the npx utility to download and execute the ai-sql package from the public npm registry. This introduces a dependency on external code from a source that is not verified as part of the author's primary infrastructure.
[COMMAND_EXECUTION]: The skill's core functionality relies on executing shell commands, specifically using npx to run the ai-sql CLI tool with user-provided arguments.
[PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection (Category 8) by interpolating untrusted natural language input into command-line arguments.
Ingestion points: User-supplied descriptions passed as arguments to the ai-sql command (e.g., in SKILL.md).
Boundary markers: Absent; input is placed directly within shell quotes without specialized delimiters or instructions to ignore embedded commands.
Capability inventory: Shell execution of the ai-sql tool.
Sanitization: No sanitization or validation logic is present in the skill instructions to filter or escape the natural language input before execution.

sql-gen