The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it fetches and processes untrusted content from the public web which is then used to update local project files.
Ingestion points: The WebFetch tool is used to read content from arbitrary competitor websites, Reddit threads, and review platforms like G2 and Capterra in SKILL.md.
Boundary markers: The instructions do not define clear boundary markers or provide the agent with specific guidance to ignore potential instructions embedded within the fetched web content.
Capability inventory: The skill possesses the capability to Write files to the docs/marketing/ directory and Edit (append to) the HUMAN_AGENDA.md file.
Sanitization: No sanitization, validation, or filtering mechanisms are described for the external content before it is processed or written to the project files.
[EXTERNAL_DOWNLOADS]: The skill facilitates the retrieval of information from external domains via WebSearch and WebFetch to perform market intelligence and competitor analysis.

cmo