The Agent Skills Directory

[DATA_EXPOSURE_AND_EXFILTRATION]: The skill uses curl to fetch data from well-known external services including Google News, Hacker News (via Algolia), and Reddit in references/newsjacking.md. These network operations are intended for monitoring industry news and do not involve sensitive internal data.
[INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its processing of untrusted external content.
Ingestion points: Data is ingested from RSS feeds, JSON APIs, and web pages from various news and podcast platforms in references/newsjacking.md and references/podcast-guest-prep.md.
Boundary markers: The instructions do not define clear boundaries or provide warnings to the agent regarding the untrusted nature of this external data.
Capability inventory: The agent has capabilities for web browsing (dev-browser) and shell command execution (curl, jq, xmllint).
Sanitization: There is no specified logic for sanitizing or filtering the content retrieved from these external sources before it is processed by the agent.

public-relations