The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The file references/experts.md contains multiple links to keithrosen.com and forgetthefunnel.com. These domains have been flagged as malicious by automated URL reputation scanners (URLite). While these are likely intended as professional references, their presence on security blacklists poses a potential risk if the agent or user accesses these sites.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external landing page content based on user-supplied URLs. This architectural pattern is vulnerable to indirect prompt injection, where an attacker could place hidden instructions on a targeted page to manipulate the agent's audit findings or behavior.
Ingestion points: External landing page URLs provided by users for conversion rate optimization (CRO) audits as described in SKILL.md.
Boundary markers: The skill does not define specific delimiters or instructional warnings to prevent the agent from following embedded commands in the analyzed content.
Capability inventory: The skill includes scripts/check-output.py for deliverable validation, which does not possess dangerous capabilities like arbitrary code execution or network exfiltration.
Sanitization: There is no evidence of filtering or sanitization performed on the content retrieved from the target URLs before processing.

landing-pages