The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructs the agent to execute local Python scripts (scripts/burn_rate_calculator.py, scripts/unit_economics_analyzer.py, and scripts/fundraising_model.py) to perform financial analysis. These scripts are part of the skill's distribution and rely exclusively on the Python standard library.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to process external data from a file named company-context.md, creating a potential surface for indirect prompt injection if the content of that file is attacker-controlled.
Ingestion points: company-context.md is read to provide context before responding to user queries.
Boundary markers: The instructions do not define explicit boundary markers or specify that the agent should ignore instructions embedded within the ingested context.
Capability inventory: The agent has the capability to execute local shell commands to run the included Python scripts.
Sanitization: There is no explicit sanitization or validation of the content within company-context.md described in the instructions; the agent is expected to interpret the data for financial modeling.

cfo-advisor