The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill documentation provides guidance on embedding external JavaScript from Bambuser's official domains (lcx-embed.bambuser.com and lcx-embed-eu.bambuser.com). This is a standard requirement for integrating the Bambuser Live Shopping player, which is a well-known third-party service.
[INDIRECT_PROMPT_INJECTION]: The skill processes product metadata and cart events that originate from external sources (Bambuser's player events and product feeds).
Ingestion points: Untrusted data enters the agent context through the event.products array in the PROVIDE_PRODUCT_DATA event handler located in reference/product-hydration.md.
Boundary markers: The provided code snippets and instructions do not include specific delimiters or 'ignore' instructions to mitigate the risk of instructions embedded within product descriptions or names.
Capability inventory: The skill uses ingested data to perform asynchronous product lookups via adapters.getProduct and modifies the player's state using player.updateProduct. It also interacts with host-provided cart adapters (addToCart, updateCartItem).
Sanitization: There is no evidence of explicit sanitization or validation of the metadata (e.g., description, name, introduction) before it is used to hydrate the UI or processed by host adapters.

bambuser-live