The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill reads data from an external Google Sheets spreadsheet, creating a potential vector for indirect prompt injection.
Ingestion points: Data is pulled into the agent's context through the gws sheets +read command as described in SKILL.md.
Boundary markers: There are no explicit delimiters or instructions provided to the agent to ignore or isolate instructions found within the retrieved spreadsheet data.
Capability inventory: The skill utilizes the gws binary to perform file listing, spreadsheet reading, and data appending operations.
Sanitization: There is no evidence of sanitization, escaping, or validation of the data retrieved from the spreadsheet before it is processed by the agent.

recipe-log-deal-update