The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill manages a registry of tasks that include prompt instructions intended for future execution.
Ingestion points: Reads job definitions, including prompt text, from JOBS.yaml located in the $PILOT_BOT_DIR directory.
Boundary markers: No delimiters or instructions are used to distinguish the stored prompt from the agent's operational logic.
Capability inventory: The skill uses the CronCreate and CronDelete tools to manage the execution lifecycle of these prompts.
Sanitization: There is no evidence of validation or sanitization of the prompt field before it is provided to the execution tools.

bot-jobs