The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes messages from external sources (WhatsApp, Slack, Discord, Telegram) which could contain malicious instructions.
Ingestion points: Messages are pulled into the system via scripts/sync_messages.mjs and scripts/ingest_messages.mjs into the Busabase backend infrastructure.
Boundary markers: The skill implements a robust "outbox" workflow where every outgoing reply must be manually reviewed and marked as approved in the Busabase replies base before it can be sent by the trusted process.
Capability inventory: The scripts/send_outbox.mjs script has the capability to send messages to external messaging platforms (Slack, Discord, Telegram, and Facebook/WhatsApp) using official APIs and user-provided credentials.
Sanitization: The frontend application uses escapeHtml to sanitize message content for display, reducing the risk of XSS within the AirApp UI.

kelly-messenger