The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the web when executing the 'Event Prospecting' playbook to build attendee and exhibitor lists.
Ingestion points: The web_search_live and web_enrich_live tools are used to fetch content from external event rosters and sponsor pages (SKILL.md, Recipe 4).
Boundary markers: There are no explicit instructions to use delimiters or 'ignore' prompts when processing the content scraped from the web.
Capability inventory: The skill can execute complex logic via JavaScript, perform paid contact enrichment, and export data to CSV/spreadsheet files.
Sanitization: The instructions do not specify any sanitization or validation of the fetched web content before it is processed by the agent.
[EXTERNAL_DOWNLOADS]: The skill references external URLs for installation and branding assets.
Evidence: Setup instructions direct the user to the vendor's MCP server installation endpoint (https://install.crustdata.com/mcp) and skill releases on GitHub (https://github.com/crustdata/skills/releases).
Evidence: The skill references Crustdata branding logos within its local assets/ directory for use in rendered reports.

sales-prospecting