The Agent Skills Directory

[SAFE]: The skill operates as intended for content strategy planning and ideation without any malicious patterns. It provides structured guidance for the agent to help users with blog topics and marketing roadmaps.
[DATA_EXPOSURE]: The skill instructs the agent to read context from specific local files such as .agents/product-marketing-context.md. This is a standard and safe practice for specialized agent skills to align with the user's project requirements.
[PROMPT_INJECTION]: Analysis of instructions revealed only legitimate guidance for the agent's role as a content strategist. No attempts to override safety filters, bypass system prompts, or disregard instructions were found.
[COMMAND_EXECUTION]: There are no shell commands, dynamic context injections (!command), or subprocess calls present in any of the skill files.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external untrusted data including keyword exports (CSV/Excel), call transcripts, survey responses, and web content from Reddit and Quora. While this constitutes an indirect prompt injection attack surface, the risk is negligible as the data is used for high-level strategy and planning rather than code execution or sensitive data manipulation.

content-strategy