The Agent Skills Directory

[NO_CODE]: The skill is entirely composed of Markdown instructions, evaluation test cases, and reference guides. It does not include any executable scripts (Python, JavaScript, etc.) or binary components.
[SAFE]: No obfuscation, prompt injection attempts, or persistence mechanisms were detected in the instructions or metadata. All external links point to established and legitimate platforms for research and professional networking, including Reddit, G2, Capterra, and LinkedIn.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted external data, such as interview transcripts and online reviews. While this presents a potential surface for indirect prompt injection, the skill lacks the necessary automated capabilities (such as shell execution or network requests) to facilitate an attack.
Ingestion points: SKILL.md describes processes for analyzing transcripts, surveys, support tickets, and online community posts.
Boundary markers: The instructions do not define specific delimiters or security prompts to prevent the agent from obeying instructions embedded within the analyzed data.
Capability inventory: None. The skill files contain no code, scripts, or tool definitions.
Sanitization: No data sanitization or validation logic is present in the provided instructions.

customer-research