The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data, creating a potential surface for indirect prompt injection attacks.
Ingestion points: The skill uses WebSearch and WebFetch to read content from Reddit (r/synthesizers, r/edmproduction, etc.), YouTube video metadata, GitHub issues/discussions, and Hacker News comments.
Boundary markers: The instructions do not define clear delimiters or "ignore instructions" wrappers for the data fetched from these external sites before the agent processes it.
Capability inventory: The skill possesses Write permissions to the workspace/trend-bank/ directory, allowing it to create new files based on the research.
Sanitization: There is no requirement for the agent to sanitize, escape, or validate the content retrieved from external sources before including it in the output files.

trend-researcher