The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill ingests data from local audit files located in ~/.geo-prospects/audits/. These files contain content scraped from external websites, such as llms.txt or general page content. There are no specified boundary markers or sanitization procedures described to prevent the agent from executing instructions hidden in this external data during proposal generation. The skill possesses the Write and Bash capabilities which could be targeted by such injections.
[COMMAND_EXECUTION]: The skill requests the Bash tool and includes examples using curl to fetch site metadata. While the provided examples are benign for identifying site configurations, the availability of a shell allows for broader command execution.
[EXTERNAL_DOWNLOADS]: The skill uses the WebFetch tool and curl commands to retrieve content from external domains for auditing purposes, which is a core part of its SEO functionality.

geo-proposal