The Agent Skills Directory

[Indirect Prompt Injection] The skill reads from several local data files, including /mnt/user/data/stock_levels.csv and /mnt/user/data/sales_history.jsonl. If these files contain untrusted content, there is a theoretical risk of indirect prompt injection targeting the reorder logic or the messages written to the outbox.jsonl sink. This is a common attack surface for data-processing skills and should be managed by ensuring the integrity of the input files.
[Data Access] The skill accesses sensitive operational data (stock levels, sales history, supplier details) from the /mnt/user/data/ directory. This access is consistent with its stated purpose of managing reorder policies and does not involve exfiltration to external systems.

reorder-policy