The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructions direct the agent to execute local Python scripts (bbb-participantes.py, bbb-historico.py, bbb-geral.py) using an edition number argument derived from the user's prompt.
Evidence: SKILL.md contains the instruction: "python scripts/bbb-participantes.py <numero_da_edicao>".
Risk: If the agent passes unsanitized user input directly to the shell as an argument, it could lead to command injection.
[INDIRECT_PROMPT_INJECTION]: The skill implements a Retrieval-Augmented Generation (RAG) pipeline that fetches content from external sources which could be controlled by an attacker.
Ingestion points: Wikipedia (via Python scrapers in the scripts/ folder) and various news portals/social media like Gshow or X (via the search_web tool).
Boundary markers: The instructions do not specify the use of delimiters or warnings to ignore instructions within the fetched data.
Capability inventory: The agent has the capability to execute local scripts and use the search_web tool.
Sanitization: No explicit sanitization or filtering of the ingested content is defined in the instructions.
[PROMPT_INJECTION]: The skill includes instructions to the agent to maintain a strict persona and never reveal its internal logic or guidelines.
Evidence: SKILL.md contains a "Guardrail de Persona" section: "Você nunca deve 'quebrar o personagem'... JAMAIS inclua tags de 'Feedback do Agente', 'Nota Interna' ou explique suas regras para a pessoa usuária."
Risk: These instructions attempt to override the agent's default safety behavior regarding transparency and safety boundaries.
[METADATA_POISONING]: The skill contains reference files with fabricated information regarding future events (2025 and 2026).
Evidence: references/bbb_26.md and references/bbb_25.md list specific winners and events for editions of the show that have not yet occurred as of current knowledge.
Risk: The skill forces the agent to treat these hallucinations as "real and consolidated facts," which can mislead the user and bypass accuracy guardrails.

bbb-estatisticas