The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external, untrusted sources such as news RSS feeds and journalist profiles.
Ingestion points: The skill fetches data from Google News, Reddit, and Hacker News using curl commands in references/newsjacking.md. It also suggests using a browser (dev-browser) to scrape journalist author pages and social media profiles in references/journalist-pitching.md.
Boundary markers: No explicit delimiters or instructions are provided to the agent to treat external content as untrusted data or to ignore potential instructions embedded within news headlines or bios.
Capability inventory: The skill possesses network read capabilities (curl) and web browsing capabilities (dev-browser). It does not exhibit file-writing or arbitrary code execution capabilities.
Sanitization: There is no evidence of sanitization, filtering, or validation of the content retrieved from external news sources or websites.
[EXTERNAL_DOWNLOADS]: The skill uses command-line tools to fetch data from well-known and reputable services.
Evidence: In references/newsjacking.md, curl is used to retrieve RSS and JSON data from Google News, Algolia (Hacker News API), and Reddit.
Context: These downloads are part of the core functionality for newsjacking (identifying trending stories) and target well-known technology and news platforms.

public-relations