The Agent Skills Directory

[SAFE]: No malicious patterns or security threats were detected. The skill is designed for read-only research and planning purposes.
[PROMPT_INJECTION]: Potential surface for Indirect Prompt Injection exists because the skill processes untrusted data from public platforms (Reddit, YouTube, TikTok, and News).
Ingestion points: External data fetched through unifapi tools (e.g., reddit/posts/{id}/comments, youtube/search).
Boundary markers: None present in the skill instructions to separate external data from system instructions.
Capability inventory: The skill is limited to reading local files (e.g., .agents/product-marketing.md) and generating structured content strategy tables. It lacks capabilities to execute shell commands, write files, or perform arbitrary network requests.
Sanitization: No explicit sanitization or filtering of external data is described.
[EXTERNAL_DOWNLOADS]: The README provides installation instructions using npx skills add unifapi-agent/agents, which is the vendor's own package for managing agent skills. This is a standard installation procedure for this ecosystem.
[DATA_EXPOSURE]: The skill accesses local configuration files such as .agents/product-marketing.md to ground its strategy in the user's business context. This is expected behavior for its stated purpose.

content-strategy