The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection by processing external, untrusted data.
Ingestion points: The skill ingests data from external competitor domains via api.semrush.com and serpapi.com, and scrapes full website content using the app.scrapingbee.com API, as detailed in SKILL.md.
Boundary markers: No explicit delimiters or instructions are provided to the agent to treat external content as untrusted or to ignore embedded instructions within the ingested data.
Capability inventory: The skill utilizes curl for network operations and generates strategic business recommendations based on the ingested data.
Sanitization: There is no evidence of filtering, validation, or sanitization of the content retrieved from external URLs before it is processed by the agent.
[COMMAND_EXECUTION]: The skill provides curl command templates to interact with external services.
The instructions include specific curl commands for retrieving domain data, keyword rankings, and SERP information from well-known services such as Semrush, SerpAPI, and ScrapingBee. These operations are aligned with the skill's primary purpose of competitive analysis.

competitor-analysis