The Agent Skills Directory

[COMMAND_EXECUTION]: The skill includes several utility scripts for lifecycle management, including scripts/setup.mjs for workspace initialization and scripts/execute_decisions.mjs for processing human-approved actions. These scripts interact with the Busabase SDK and are intended for administrative use by the operator.
[INDIRECT_PROMPT_INJECTION]: The skill's primary function involves ingesting untrusted external data from public sources like market news and regulatory updates, which presents a surface for indirect prompt injection attacks.
Ingestion points: The agent is instructed to browse and summarize public financial news, central bank updates, and competitor announcements (SKILL.md).
Boundary markers: The skill implements a strict review gate; signals and actions are held in a Busabase-backed "cockpit" (AirApp) for human approval before any external handoff is performed.
Capability inventory: The skill has the ability to read and write to the Busabase data layer and provides local scripts to dry-run or finalize handoff statuses.
Sanitization: The AirApp UI code includes standard HTML escaping for rendering data (app.js) and utilizes a normalization layer in financial-model.js to enforce schema constraints on ingested data.

kelly-financial-services-intel