The Agent Skills Directory

[NO_CODE]: The skill consists entirely of Markdown documentation and instructional templates (SKILL.md, risk-register-template.md, security-frameworks-map.md). It does not include any scripts, executable code, or automated tool invocations.
[INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for ingesting external organizational data, maturity assessments, and asset inventories (Phase 1). While it lacks explicit technical boundary markers or sanitization logic in its instructions, the risk is negligible as it is a high-level strategic guidance skill without direct automated data processing capabilities.
[SAFE]: The security principles and orchestration maps provided follow industry best practices (e.g., Zero Trust, Least Privilege, Defense in Depth) and aim to improve security posture rather than compromise it.

ciso