The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes local Python scripts (firecrawl.py and rss_monitor.py) within the plugin's environment to perform domain mapping and trend monitoring. These executions are scoped to the local environment and intended for data retrieval.
[EXTERNAL_DOWNLOADS]: Fetches marketing and topic trends from established services including Google Trends, Hacker News, and Reddit. These sources are considered well-known and reputable.
[DATA_EXFILTRATION]: Analyzed data is stored in the agent's local memory/ directory. While this involves reading and writing files, it is used for persistence and research history rather than unauthorized exfiltration.
[PROMPT_INJECTION]: The skill is subject to potential indirect prompt injection due to its ingestion of scraped content from competitor domains. Ingestion points: Competitor URLs are scraped via firecrawl.py as described in SKILL.md. Boundary markers: No specific delimiters are mentioned for the scraped markdown content to isolate it from instructions. Capability inventory: The skill can write to the memory/ directory and call local scripts. Sanitization: There is no explicit description of content filtering or sanitization for scraped data. This is an inherent risk for research skills and is not indicative of malicious intent.

content-gap-analysis