The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input from failed generations, tool errors, and diagnostic logs to generate reports. While this presents an attack surface where malicious data could attempt to influence the agent's behavior, the skill provides robust mitigation instructions. 1. Ingestion points: Untrusted data enters the agent context through error messages and the output of the diagnostics_run command. 2. Boundary markers: The instructions mandate redaction and state 'post only after the user approves the exact text'. 3. Capability inventory: The skill uses GitHub issue creation and email drafting to transmit data. 4. Sanitization: The skill explicitly lists fields to exclude and include from diagnostic reports and identifies sensitive artifacts like API keys and signed URLs that must be stripped.
[SAFE]: No malicious patterns or security risks were identified. The skill's behavior is consistent with its stated purpose of assisting users with support requests while maintaining privacy and security.

scenario-report