The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill instructions direct the agent to ingest content from external files to gain context about the user's product, which creates a potential surface for indirect prompt injection.
Ingestion points: The skill explicitly instructs the agent to read .agents/product-marketing.md, .claude/product-marketing.md, or product-marketing-context.md if they exist in the user's workspace.
Boundary markers: There are no specific boundary markers or instructions provided to the agent to treat the content of these files strictly as data or to ignore any embedded instructions within them.
Capability inventory: The skill is advisory in nature and does not list any allowed-tools or demonstrate capabilities for network operations, file system writes, or shell command execution, which significantly limits the potential impact of an injection.
Sanitization: The skill does not define any sanitization or validation logic for the content read from the external context files.

community-marketing