The Agent Skills Directory

[SAFE]: The skill's instructions and reference documents provide legitimate guidance on product strategy and OKR frameworks. No malicious prompt injections, deceptive metadata, or persistence mechanisms were detected.
[COMMAND_EXECUTION]: The skill includes a Python script scripts/okr_cascade_generator.py for local OKR generation. Analysis of the source code confirms it uses only standard Python libraries for data processing and does not perform any dangerous shell operations, network calls, or sensitive file access.
[INDIRECT_PROMPT_INJECTION]: The script ingests user-provided metrics via the --metrics CLI argument. However, this ingestion surface is not exploitable because the skill lacks the capabilities required for an attack; there are no network operations, file-writing functions, or dynamic code execution patterns within the skill's code.

product-strategist