The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest data from external context files, creating a potential surface for indirect prompt injection if those files contain malicious instructions.
Ingestion points: The SKILL.md file instructs the agent to read .agents/product-marketing-context.md or .claude/product-marketing-context.md to inform its recommendations.
Boundary markers: Absent. The skill does not provide instructions to the agent to treat the context file content as untrusted or to ignore embedded instructions.
Capability inventory: The skill primarily performs text analysis and generation of marketing copy; it does not request tools for network access, file writing, or shell execution.
Sanitization: Absent. There are no instructions to sanitize or validate the content of the marketing context files.

popup-cro