The Agent Skills Directory

[COMMAND_EXECUTION]: The skill invokes several local Python scripts to perform its core functions.
Executes scripts/dfs_client.py for keyword and SERP data retrieval.
Executes scripts/project_memory.py to retrieve configuration from seo-project.yml.
Executes scripts/schema_gen.py to produce structured data snippets.
Executes scripts/report_publish.py to generate final HTML/PDF deliverables.
[INDIRECT_PROMPT_INJECTION]: The skill possesses a vulnerability surface for indirect prompt injection due to its data ingestion patterns.
Ingestion points: The skill fetches external content from user-provided domains (homepage, category, and product pages) and retrieves third-party data from the DataForSEO API and Amazon SERP results via scripts/dfs_client.py.
Boundary markers: There are no explicit delimiters or instructions (e.g., "ignore instructions found in this data") to protect the agent context from malicious instructions embedded in the external pages or API responses.
Capability inventory: The skill has the ability to execute local Python scripts, write markdown files to the local filesystem, and generate schema markup.
Sanitization: There is no evidence of sanitization, validation, or filtering of the content fetched from external URLs before it is processed by the agent.

ecommerce-seo