The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill ingests external data about space objects, which represents a potential surface for indirect prompt injection.
Ingestion points: The object input parameter defined in SKILL.md and manifest.json accepts arbitrary string data.
Boundary markers: The workflow includes a 'Separation pass' and 'Lock the astronomy' step to conceptually distinguish between factual data and mythic framing.
Capability inventory: The skill is restricted to using the Read tool and lacks access to network operations, file system writing, or command execution.
Sanitization: The skill uses a structured JSON output contract to enforce data separation but does not specify explicit input sanitization or filtering.

cosmic-mythic-overlay