The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill retrieves untrusted data from external sources and incorporates it into local project files, creating a vulnerability to malicious instructions embedded in web content.
Ingestion points: The skill uses WebSearch and WebFetch to ingest content from competitor reviews (G2, Capterra, TrustRadius), Reddit threads, and industry forums as defined in the 'How You Research Products' section.
Boundary markers: Absent. There are no instructions or delimiters defined to prevent the agent from executing instructions that might be hidden within the fetched web content.
Capability inventory: The skill uses the Write tool to create documents in docs/product/ and the Edit tool to modify HUMAN_AGENDA.md based on its research.
Sanitization: Absent. The instructions do not require the agent to sanitize, filter, or validate the content retrieved from external websites before processing it.

cpo