The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze data from local files and external web search results, which creates a potential surface for indirect prompt injection.
Ingestion points: The skill is instructed to scan the docs/finance/ directory and perform benchmarks via the WebSearch tool.
Boundary markers: The instructions lack explicit delimiters or warnings to ignore potential instructions embedded within financial documents or search results.
Capability inventory: The skill has the ability to modify the file system via the Write and Edit tools (specifically targeting docs/finance/ and HUMAN_AGENDA.md).
Sanitization: No sanitization or validation protocols are defined for the content retrieved from external or local sources before it is processed by the agent.

cfo