The Agent Skills Directory

[PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it instructs the agent to extract information from the narrative sections of market insight files which contain content from platforms like Reddit, TikTok, and App Store reviews.
Ingestion points: Data is ingested from memory/market_insights/*.md and memory/ideas/<slug>/*.json files.
Boundary markers: The instructions do not include boundary markers or warnings to ignore instructions that might be embedded in the narrative text of these files.
Capability inventory: The skill has the capability to write to the filesystem at memory/ideas/<slug>/market_size.json.
Sanitization: No sanitization or content validation is performed on the narrative data before it is processed by the agent.
[DATA_EXFILTRATION]: The skill accesses the user_profile.md file to evaluate the founder's experience level.
Exposure: Reading from the user profile exposes personal or professional context to the skill's logic.
Risk: While used for legitimate calculation adjustments, accessing such files is a form of data exposure. No network exfiltration was detected.

tam-sam-som-builder