The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill serves as a supervisor that ingests raw user data and coordinates actions across multiple modules, creating an indirect prompt injection surface.
Ingestion points: The user_request field provided in the input contract (SKILL.md) which passes raw user input to the agent.
Boundary markers: The instructions lack explicit delimitation or instructions to ignore embedded commands within the user_request during processing.
Capability inventory: The skill is designed to write metadata and campaign files to the ./brand-brain/ directory and trigger specialized worker modules for conversion, email, and SMS marketing.
Sanitization: No sanitization, validation, or filtering logic is specified for the raw user input before it is used to influence the supervisor's routing decisions or passed to worker modules.

afa-monetize