The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it integrates unvetted data from external web sources and user files into the agent's context.
Ingestion points: The skill instructions in SKILL.md direct the agent to research competitors via web search (including Reddit, G2, and Capterra) and read user-provided files like win/loss data and sales notes.
Boundary markers: There are no specific delimiters or warnings instructing the agent to ignore or isolate instructions potentially embedded in the external content.
Capability inventory: The skill utilizes web search and file reading capabilities to collect data for the battlecard generation.
Sanitization: The instructions do not include any steps for sanitizing, validating, or filtering the content retrieved from external sources before processing.

competitive-battlecard