The Agent Skills Directory

[PROMPT_INJECTION]: The skill instructs the agent to process untrusted note content using tools like schema_infer and schema_validate to maintain data consistency. This ingestion of external data creates a surface for indirect prompt injection where instructions embedded in notes could influence the agent's behavior during schema discovery or validation tasks.
Ingestion points: Note bodies and metadata analyzed by schema_infer, schema_validate, and search_notes tools (SKILL.md).
Boundary markers: None identified; the instructions do not specify using delimiters or ignoring embedded instructions when processing note content.
Capability inventory: The agent can modify the file system using write_note and edit_note, and query existing data using search_notes (SKILL.md).
Sanitization: No sanitization, filtering, or validation of the note content is described before it is passed to the agent's analytical tools.

memory-schema