The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill analyzes external data sources, including release manifests, local scripts, and log files, to validate production readiness. This ingestion of untrusted local data creates a potential surface for indirect prompt injection if those files contain instructions intended to mislead the agent.
Ingestion points: Uses Read, Glob, and Grep tools to inspect files in the local environment during the verification and reconciliation steps in SKILL.md.
Boundary markers: The instructions do not specify the use of delimiters or explicit "ignore embedded instructions" warnings for the file content being processed.
Capability inventory: The skill is authorized to use Write, Edit, and WebFetch tools, providing a capability set that could be misused if the agent is successfully influenced by malicious content in the ingested files.
Sanitization: The instructions do not define specific sanitization or validation routines for the data extracted from the local environment.
[EXTERNAL_DOWNLOADS]: The skill and its associated documentation (references/official-docs.md) reference official technical resources, deployment guides, and sample code from TechSmith's support domains and public GitHub repositories.

techsmith-prod-checklist