The Agent Skills Directory

[COMMAND_EXECUTION]: The skill frequently employs node -e to process data locally, such as encoding ABI calldata for Ethereum transactions and decoding hex responses in get-agent.sh, register-http.sh, and register.sh.
[COMMAND_EXECUTION]: Scripts including bridge-to-mainnet.sh, register.sh, and update-profile.sh execute ~/thinkfleet/skills/bankr/scripts/bankr.sh. This represents a cross-skill dependency on a vendor-owned resource for managing blockchain transactions.
[EXTERNAL_DOWNLOADS]: The skill makes network requests to well-known infrastructure providers, including Pinata for IPFS pinning, and Alchemy or LlamaRPC for Ethereum blockchain interactions.
[PROMPT_INJECTION]: An indirect prompt injection surface is present in get-agent.sh due to how it handles external agent data.
Ingestion points: The script fetches agent registration JSON files from remote IPFS gateways or arbitrary HTTP URLs specified by on-chain records.
Boundary markers: Fetched content is printed to the terminal without delimiters or instructions to the agent to ignore potentially malicious embedded text.
Capability inventory: The skill provides capabilities for bridging funds, uploading data, and submitting on-chain transactions via the bankr utility.
Sanitization: External content is passed through jq for formatting but undergoes no security sanitization or validation before being output into the agent's context.

erc-8004