The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data from external sources, creating a surface for indirect prompt injection.
Ingestion points: The skill utilizes sandbase_run to perform search, scraping, and enrichment tasks involving external evidence (found in SKILL.md).
Boundary markers: The instructions do not specify the use of delimiters or specific safety instructions for the agent to isolate external content from its core logic.
Capability inventory: The skill possesses the capability to perform network operations and model inference via the sandbase_run tool (found in SKILL.md and references/sandbase-api-map.md).
Sanitization: There are no outlined procedures for sanitizing, filtering, or validating the content retrieved from external sources before it is processed by the agent.

daily-briefing