The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The .skill.config file contains hardcoded Notion Page IDs (NOTION_MCP_SKILLS_PAGE_ID, NOTION_ADMIN_LEGAL_PAGE_ID, NOTION_INVESTOR_CHEAT_SHEET_ID). These identifiers point directly to sensitive company and personal data including passport numbers, SSNs, and legal filings, contradicting the security instructions in SKILL.md which state identifiers should not be hardcoded.
[INDIRECT_PROMPT_INJECTION]: The skill fetches data from external Notion pages that could contain untrusted content.
Ingestion points: Fetches content from Notion pages using the notion_notion-fetch tool.
Boundary markers: No delimiters or instructions to ignore embedded commands are present in the workflow.
Capability inventory: The skill can write to the local file system (cat >) and update Notion pages (notion_notion-update-page).
Sanitization: No sanitization, validation, or filtering of the fetched Notion content is implemented.
[COMMAND_EXECUTION]: The workflow uses shell commands (cat and cat >) to manage local configuration files within the .opencode/skill/company-admin/ directory.
[EXTERNAL_DOWNLOADS]: The skill references external URLs for Firstbase and Cal.com. These are well-known services used for company administration and team scheduling, and the URLs serve as informational references.

company-admin