The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external, untrusted sources which could contain hidden instructions intended to override agent logic.
Ingestion points: The persona utilizes gws-gmail and gws-chat to read emails and messages, and gws-drive to access project files.
Boundary markers: The instructions do not specify the use of delimiters or specific markers to differentiate between user instructions and data content.
Capability inventory: The skill possesses significant capabilities including sending emails via Gmail, modifying spreadsheets, and managing calendar invitations.
Sanitization: There are no specific instructions for the agent to sanitize or validate the content of messages or files before performing downstream actions like scheduling or emailing.

persona-project-manager