The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes data from untrusted sources, including external APIs and direct user input, which presents a surface for indirect prompt injection attacks.
Ingestion points: Examples in references/step-basics.md show fetching data from an external URL, and references/pattern-debouncing.md shows processing raw user input.
Boundary markers: The provided code snippets do not include boundary markers or specific instructions to isolate untrusted data from the agent's logic.
Capability inventory: The skill documentation describes significant capabilities, such as network operations (http.Get), database access, and workflow control (starting, cancelling, and forking workflows).
Sanitization: No sanitization or validation of the ingested external content is demonstrated in the examples.
[EXTERNAL_DOWNLOADS]: The skill instructs users to install the DBOS Go SDK using the command go get github.com/dbos-inc/dbos-transact-golang/dbos@latest. This is a third-party dependency from a source not included in the trusted organization list.

dbos-golang