The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes fitness class data and metadata from Peloton's catalog, which represents an indirect prompt injection surface.
Ingestion points: External class data is ingested through commands like peloton search-class, peloton ride-archived, and peloton ride-live in SKILL.md.
Boundary markers: The instructions do not include explicit warnings to ignore instructions embedded in the external class data, though the use of a presentation widget provides some isolation.
Capability inventory: The skill possesses write capabilities including peloton schedule-event and peloton delete-scheduled-event as defined in manifest.yaml.
Sanitization: The skill mandates the use of widget.create for presenting class lists, which ensures data is handled as structured UI elements rather than raw conversational text, mitigating the risk of the agent executing instructions found in class descriptions.

peloton