The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill includes a curated list of directories that contains a blacklisted URL (https://fitprofessionals.net) in references/directory-list.md and references/submission-tracker-template.csv. This URL has been confirmed as malicious by reputation scanners. Additionally, SKILL.md and the submission tracker CSV have been flagged for malicious file reputation.
[INDIRECT_PROMPT_INJECTION]: The skill instructions include reading untrusted local marketing files into the agent's context, which presents a potential surface for indirect prompt injection. 1. Ingestion points: The skill attempts to read from .agents/product-marketing.md, .claude/product-marketing.md, or product-marketing-context.md. 2. Boundary markers: The instructions lack explicit delimiters or warnings to ignore embedded instructions in the ingested files. 3. Capability inventory: The skill provides instructions for shell-based verification using curl and grep, providing a vector if the agent is directed to execute these on malicious content. 4. Sanitization: No validation or sanitization of the external file content is described before it is processed by the agent.

directory-submissions