The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill navigates to and reads content from external web applications to generate marketing text. An attacker who controls a targeted website could potentially include hidden instructions to influence the generated markdown copy.
Ingestion points: Content is ingested via browser_navigate and browser_snapshot as described in SKILL.md.
Boundary markers: No specific delimiters or safety instructions are defined for the ingested web content.
Capability inventory: The skill can create local directories and write files (PNG screenshots and Markdown listing copy) but lacks external network transmission capabilities.
Sanitization: The instructions do not specify sanitization for content extracted from the accessibility tree or page text.
[COMMAND_EXECUTION]: The skill uses mkdir -p to manage the local marketing/ directory. This is a standard and safe operation for organizing the generated assets.

generate-marketing-screens