The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill defines payment processing handlers that ingest untrusted data from external network requests to perform sensitive operations.
Ingestion points: External request data is ingested via req.body and req.params in the createPaymentHandler and cancelPaymentHandler examples within SKILL.md.
Boundary markers: Absent; the code snippets do not implement delimiters or specific instructions to isolate untrusted input from the processing logic.
Capability inventory: The skill demonstrates capabilities for persistent data storage via paymentStore and network-based API invocations via the acquirer interface in SKILL.md.
Sanitization: Absent; the provided implementation examples do not show explicit validation, filtering, or sanitization of the request fields before they are used in database lookups or financial transaction calls.

payment-idempotency