The Agent Skills Directory

[PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it is instructed to ingest data from external context files within the project directory without explicit sanitization or boundary markers to prevent the agent from obeying embedded instructions.
Ingestion points: The skill instructions in SKILL.md explicitly direct the agent to read context from .agents/product-marketing.md, .claude/product-marketing.md, or product-marketing-context.md.
Boundary markers: There are no instructions provided to treat the content of these files as untrusted data or to ignore embedded instructions.
Capability inventory: The skill relies on file-reading capabilities to retrieve marketing context.
Sanitization: No validation or sanitization process is defined for the ingested file content.

marketing-ideas