The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill accepts external input from the user regarding the role, team situation, and performance expectations to populate an Excel workbook. While this presents a standard attack surface for indirect prompt injection, the risk is minimal as the output is restricted to structured spreadsheet columns and specific HR guidance. There are no explicit sanitization steps, but the highly structured nature of the workflow (specific sheets and columns) limits the potential impact of adversarial content.
[SAFE]: No obfuscation, data exfiltration, or remote code execution patterns were detected. The skill uses standard internal spreadsheet tools to generate its deliverables and operates within the expected scope of its stated purpose.

onboarding-plan