The Agent Skills Directory

[PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it aggregates content from multiple departmental directories that may be populated by different users.
Ingestion points: The skill reads context from directories including data/leadership/, data/gtm/, data/cfo/, data/product/, data/engineering/, data/ceo/, and CLAUDE.md.
Boundary markers: No specific delimiters or instructions are provided to the agent to treat this external data as untrusted or to ignore embedded instructions.
Capability inventory: The skill is designed for information synthesis and reporting; it does not contain direct file-write, network, or subprocess capabilities.
Sanitization: No sanitization or validation of the ingested data is performed before processing.

ceo