The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and synthesize large amounts of data from untrusted external sources, creating a surface for indirect prompt injection attacks.
Ingestion points: The skill fetches data from Reddit, Twitter/X, YouTube, news articles, and general web searches as described in the Workflow section of SKILL.md.
Boundary markers: The instructions do not define delimiters or specific safety instructions to ignore embedded commands within the searched content.
Capability inventory: The skill uses sandbase_run to execute various data retrieval and analysis tools defined in references/sandbase-api-map.md.
Sanitization: There are no instructions provided for sanitizing or filtering the content retrieved from external platforms before synthesis.
[COMMAND_EXECUTION]: The skill uses a discovery-and-run pattern where it identifies API endpoints via sandbase_discover and executes them via sandbase_run. While these are part of the vendor's provided infrastructure, this dynamic invocation of capabilities based on search results requires careful handling to ensure only intended tools are executed.

last30days-research