The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill retrieves and processes untrusted content from ticket records.
Ingestion points: FRESHSERVICE_LIST_TICKETS and FRESHSERVICE_GET_TICKET tools fetch ticket subjects and descriptions from the Freshservice platform (SKILL.md).
Boundary markers: The instructions lack explicit delimiters or warnings to ignore embedded natural language instructions within the retrieved ticket data.
Capability inventory: The skill utilizes tools with write access (FRESHSERVICE_CREATE_TICKET, FRESHSERVICE_BULK_UPDATE_TICKETS) and communication capabilities (FRESHSERVICE_CREATE_TICKET_OUTBOUND_EMAIL).
Sanitization: There are no instructions to sanitize or validate external content before the agent acts upon it.
[EXTERNAL_DOWNLOADS]: The setup process requires the user to add an external MCP server at https://rube.app/mcp to provide the Freshservice toolkit (SKILL.md). This creates a dependency on an external service provider.

freshservice-automation