The Agent Skills Directory

[PROMPT_INJECTION]: The skill processes untrusted user data, creating a surface for indirect prompt injection attacks.
Ingestion points: scripts/coverage_table.py and scripts/panel_report.py read CSV, Parquet, and JSON files provided by the user.
Boundary markers: There are no explicit delimiters or instructions to ignore embedded commands within the ingested data.
Capability inventory: The skill has file system write access via scripts/panel_report.py and performs data processing using the pandas library.
Sanitization: No input sanitization or validation is performed on the data content before it is processed by the agent.
[COMMAND_EXECUTION]: The skill instructs the agent to execute internal Python scripts to perform its primary analysis tasks.
Evidence: SKILL.md provides bash command examples such as python scripts/coverage_table.py and python scripts/panel_report.py. These executions are limited to the skill's own scripts.

eda-sports