The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill reads data from local source files, which creates a surface for potential indirect prompt injection attacks. 1. Ingestion points: Reads content from founder/numbers.json, founder/ops.md, founder/brand.md, and founder/marketing.md. 2. Boundary markers: No explicit delimiters or instructions are present to prevent the agent from following directions embedded within the source files. 3. Capability inventory: The skill is restricted to file system read and write operations (founder/launch.md) and does not possess network access or shell execution capabilities. 4. Sanitization: The skill does not perform validation or escaping on the content ingested from the local files.

founder-launch