The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The file references/submission-tracker-template.csv contains the URL https://fitprofessionals.net, which has been confirmed as malicious and blacklisted by automated security scanners (URL:Blacklist|URC1A1CADBA41B2847-0200|urlb). Providing malicious links in a resource intended for user submission activity poses a high risk of directing users to compromised or harmful websites.
[PROMPT_INJECTION]: The skill's primary function involves ingesting untrusted user data to generate marketing descriptions and distribution plans, creating a surface for indirect prompt injection.
Ingestion points: The agent is instructed to read product marketing context from files like .agents/product-marketing.md and through direct user responses to readiness assessment questions in SKILL.md.
Boundary markers: There are no explicit boundary markers or instructions to treat user-supplied product data as untrusted content to prevent the execution of embedded instructions.
Capability inventory: The agent generates positioning variants, taglines, and founder stories, effectively interpolating user-controlled strings into its own output which may be further processed or acted upon.
Sanitization: No evidence of sanitization, escaping, or validation of user-supplied product content was found.

directory-submissions