The Agent Skills Directory

[SAFE]: The skill is purely instructional, providing strategies for popup timing, design, copy, and frequency without any associated scripts or executable components.
[INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read context from local files such as .agents/product-marketing-context.md. While this constitutes data ingestion, the skill lacks any capabilities (such as file writing, command execution, or network access) that would allow for exploitation of malicious content within those files. The risk is limited to influencing the agent's textual advice.
[NO_CODE]: No scripts, package manifests, or binary files are included in the skill package.

popup-cro