The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill manages data from external suppliers via a portal, which introduces a potential surface for indirect prompt injection. * Ingestion points: Supplier-provided data enters the system during the goods receipt process and is subsequently analyzed during vendor performance scorecard generation. * Boundary markers: The instructional code snippets and templates do not demonstrate the use of specific delimiters or instruction-ignore markers for external data strings. * Capability inventory: The skill's documented capabilities are restricted to database transactions and automated email notifications, with no access to high-risk operations such as shell execution or arbitrary file system writes. * Sanitization: The implementation requirements in the evaluation criteria specifically mandate the use of secure, tokenized access and strict ownership validation to ensure that supplier data is isolated and authenticated.

vendor-management