The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill provides implementation patterns for handling external VoIP push notification payloads, creating a surface for potential indirect prompt injection attacks.
Ingestion points: references/callkit-patterns.md contains a NotificationService extension that decrypts and processes data from UNNotificationRequest payloads.
Boundary markers: The provided Swift code lacks delimiters or explicit instructions to treat external metadata (such as caller names) as untrusted content.
Capability inventory: The skill utilizes CXProvider to report incoming call information to the system UI based on data received from external push payloads.
Sanitization: No input sanitization or validation logic is demonstrated for the strings derived from the external payloads.
[EXTERNAL_DOWNLOADS]: The skill includes references to a non-standard external domain for technical documentation.
Evidence: SKILL.md contains multiple links to https://sosumi.ai/documentation/ for CallKit and PushKit references.

callkit