The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection by ingesting and processing data from external files. Ingestion points: The skill reads context from .agents/marketing-learnings.md and .agents/marketing-strategy.md. Boundary markers: The instructions do not specify delimiters or ignore-instructions for these files. Capability inventory: The skill can trigger various downstream tools (e.g., referrals, emails, budget-allocation) and modify strategic priority sections in project documentation. Sanitization: No input validation or filtering is specified for the data read from the local files.

moat-builder