The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted content from external research papers which could influence the agent's behavior during summary generation.
Ingestion points: The scripts/generate_report.py script fetches paper titles, abstracts, and full PDF text from the Zotero API and arXiv search results.
Boundary markers: The instructions in SKILL.md lack explicit delimiters or warnings to ignore instructions embedded within the processed literature (e.g., when generating the 3-5 line summaries in Phase 2).
Capability inventory: The skill uses the Bash tool to execute scripts, the Write tool to save reports and Obsidian notes, and the Read tool to access configuration.
Sanitization: No sanitization or filtering is applied to the extracted PDF text or metadata before it is passed to the agent for synthesis and report writing.
[COMMAND_EXECUTION]: The skill relies on executing local Python scripts and system tools via the shell.
The SKILL.md file contains numerous shell commands using the Bash tool to orchestrate data collection, search, and note creation.
The scripts/export_report.py script uses subprocess.run to invoke external binaries (pandoc and hwpx-convert). These calls use list-based arguments rather than shell strings, which is a safe practice that prevents typical command injection vulnerabilities.

zotero-report