The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes data from external, untrusted sources which creates a surface for indirect prompt injection attacks.
Ingestion points: Data enters the agent context through the outputs of tools such as strale_whois_lookup, strale_dns_lookup, strale_ssl_check, and dataforseo_v3_serp_google_organic_live_advanced as defined in SKILL.md and references/sandbase-api-map.md.
Boundary markers: The instructions do not specify the use of delimiters (e.g., XML tags or triple backticks) or explicit "ignore embedded instructions" warnings when processing the retrieved domain data.
Capability inventory: The skill is restricted to read-only research capabilities; it does not include file system writes, network exfiltration commands, or dynamic code execution capabilities.
Sanitization: There is no evidence of sanitization, escaping, or filtering of the external content before it is interpolated into the agent's prompt context.

domain-analyzer