The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The dialogue system processes external data containing instructions that can trigger narrative events and game signals.
Ingestion points: Dialogue data is ingested in scripts/dialogue_engine.gd through the load_dialogue_graph function and in scripts/dialogue_manager.gd via start_dialogue.
Boundary markers: There are no explicit boundary markers or 'ignore' instructions implemented to prevent the agent or engine from obeying embedded tags or signals in the dialogue text.
Capability inventory: The system can emit arbitrary signals via scripts/dialogue_event_bridge.gd (GlobalBus.emit_signal) and scripts/dialogue_engine.gd (narrative_event.emit). Additionally, scripts/dialogue_manager.gd can mutate internal variables using the set_var property defined in the dialogue data.
Sanitization: The implementation lacks validation or sanitization of signal names, event IDs, or variable keys before they are processed or emitted, allowing the data source to control which game logic is triggered.

godot-dialogue-system