The Agent Skills Directory

Indirect Prompt Injection Surface: The skill is designed to ingest and process data from external services, which could potentially contain untrusted instructions.
Ingestion points: Transaction details from PayPal, revenue data from QuickBooks, and campaign activity from HubSpot are all processed to generate the final brief.
Boundary markers: The instructions do not specify the use of delimiters or 'ignore' directives to separate the ingested data from the system prompt.
Capability inventory: The skill has access to the Bash, WebFetch, and Read tools to execute its logic.
Sanitization: There is no evidence of explicit sanitization or filtering of the content retrieved from these external platforms before it is analyzed.

sales-brief