The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data which creates a potential surface for indirect prompt injection attacks.
Ingestion points: The skill reads source material from ./docs/essays/, ./docs/essays/research-logs/research-log.md, and ./docs/product-discovery.md (as specified in Step 1).
Boundary markers: There are no explicit instructions or delimiters defined to isolate the processed content or warn the agent to ignore embedded instructions within these files.
Capability inventory: The skill uses the Write and Edit tools to create and modify ./docs/domain-model.md based on the processed content.
Sanitization: The instructions do not specify any validation or sanitization of the input text before it is interpolated into the domain model drafting process.

rdd-model