The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill defines a protocol for the agent to ingest and analyze information from external, untrusted sources, creating a surface for indirect prompt injection attacks.
Ingestion points: In SKILL.md, the "5-Source Intelligence Gathering Protocol" instructs the agent to monitor competitor changelogs, GitHub releases, documentation, and customer reviews on platforms like Reddit, G2, Capterra, and Trustpilot.
Boundary markers: The instructions do not specify the use of delimiters, XML tags, or "ignore instructions" warnings when processing the data fetched from these external sites.
Capability inventory: No executable scripts, subprocess calls, network operations, or file-write capabilities were identified within the skill's own files (SKILL.md, evals/routing.yaml, and the .skill archive).
Sanitization: The skill contains no instructions for the agent to sanitize, filter, or escape content retrieved from external sources before synthesizing it into dossiers or battlecards.

competitive-intel