The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill's core functionality involves scraping real-time data from external websites (e.g., TechCrunch, Twitter, LinkedIn) and social media to provide context for AI-driven content generation. This allows untrusted external content to be processed directly by the LLM.
Ingestion points: The ResearchEngine component in src/research/engine collects data from multiple external web domains.
Boundary markers: The provided code snippets do not implement delimiters or specific instructions to the model to ignore potential injection attacks embedded within the scraped research data.
Capability inventory: The skill has permissions to write files to the local filesystem (out/ directory), perform network calls to AI service providers, and interact with AWS for cloud-based video rendering.
Sanitization: There is no evidence of content sanitization, filtering, or validation performed on the scraped data before it is passed to the AI generation logic.
[EXTERNAL_DOWNLOADS]: The skill requires the user to download and execute third-party code from a repository not associated with a recognized trusted organization.
Repository Source: The skill is based on the repository located at https://github.com/pennydinh/marketing-pineline-share.git.
Package Installation: The installation workflow relies on npm install, which pulls various dependencies from the public npm registry, creating a standard supply chain risk surface.

marketing-pipeline-ai-content-automation