The Agent Skills Directory

[SAFE]: No evidence of malicious behavior, Base64 obfuscation, hardcoded credentials, or unauthorized command execution was found within the skill's instructions, metadata, or evaluation files.
[PROMPT_INJECTION]: The skill's primary function involves ingesting and analyzing untrusted third-party data from external sources, which presents a surface for indirect prompt injection.
Ingestion points: The skill analyzes customer transcripts, survey results, support tickets, and external web content from platforms like Reddit, Hacker News, and G2, as described in SKILL.md and references/source-guides.md.
Boundary markers: Absent. The instructions do not specify the use of delimiters or specific safety instructions to isolate external research data from the agent's core directives.
Capability inventory: None. The skill package consists solely of markdown documentation and evaluation JSON, containing no executable scripts, tool definitions, or shell commands.
Sanitization: Absent. The skill does not provide mechanisms for filtering or sanitizing external content before it is processed by the agent.

customer-research