The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses the Bash tool to perform local directory management, specifically initializing the storage path at ~/.geo-prospects/. This is standard behavior for a local CLI utility.
[DATA_EXPOSURE]: The skill manages business information, including contact details and deal values, within a local JSON database at ~/.geo-prospects/prospects.json. This data is kept within the user's home directory and is not transmitted to external services by the skill itself.
[INDIRECT_PROMPT_INJECTION]: The skill presents an attack surface by ingesting untrusted data through domain names and interaction notes.
Ingestion points: Domain names in /geo prospect new, /geo prospect show, and /geo prospect audit; and note text in /geo prospect note.
Boundary markers: The instructions do not define explicit boundary markers or delimiters for the user-supplied strings.
Capability inventory: The skill has access to Read, Write, Bash, and Glob tools, which are used to manipulate local files and run audit commands.
Sanitization: There is no evidence of sanitization or validation performed on the domain or note strings before they are processed by the agent or passed to tools like /geo quick.

geo-prospect