The Agent Skills Directory

[COMMAND_EXECUTION]: The setup.md file contains a shell script intended for environment initialization. This script creates the ~/email-management/ directory and several tracking files. It includes security-conscious commands such as chmod 700 and chmod 600 to restrict access to these files to the current user only.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted data in the form of email text, which creates a surface for indirect prompt injection.
Ingestion points: Email text provided through user chat or referenced integration skills.
Boundary markers: Absent. No specific delimiters are defined to isolate untrusted email content from the agent's core instructions.
Capability inventory: File read/write operations within the ~/email-management/ directory. No network access or arbitrary system command capabilities are provided.
Sanitization: Absent. The workflow relies on the agent's internal reasoning and explicit instructions to classify content before responding.

Email Management