The Agent Skills Directory

[PROMPT_INJECTION]: The skill instructs the agent to analyze untrusted data from sources such as interview transcripts, survey results, and online communities like Reddit and G2 (SKILL.md, references/source-guides.md). This ingestion of external, uncontrolled content creates a surface for indirect prompt injection. 1. Ingestion points: Untrusted data enters the agent's context through transcripts and forum posts. 2. Boundary markers: The instructions do not define specific delimiters or directives to ignore embedded commands within the processed data. 3. Capability inventory: Analysis of the skill reveals no executable scripts, tool configurations, or dangerous capabilities such as file writing or network exfiltration. 4. Sanitization: No mechanisms for filtering or escaping external content are mentioned.
[NO_CODE]: The skill consists entirely of markdown instructions, reference documentation, and evaluation cases, without any included scripts, binaries, or executable code.
[SAFE]: No evidence of obfuscation, hardcoded credentials, or persistence mechanisms was found in the provided files.

customer-research