The Agent Skills Directory

[PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it is designed to ingest and process untrusted data from external social media platforms to assist with engagement triage.
Ingestion points: External content is retrieved from Reddit, Hacker News, and Bluesky using the methods described in references/listening.md.
Boundary markers: The instructions do not specify boundary markers or include directives for the agent to ignore instructions that might be embedded in the social media posts it reads.
Capability inventory: The agent is empowered to execute bash commands for data retrieval and use the resulting text to score leads and draft social media responses.
Sanitization: There is no evidence of sanitization or filtering of the fetched content before it is processed by the agent's logic.
[COMMAND_EXECUTION]: The skill provides bash recipes intended for the agent to execute to automate data retrieval from external services.
references/listening.md contains templates using curl to fetch JSON data from reddit.com, hn.algolia.com, and public.api.bsky.app, often piping the output directly to jq for parsing. While targeting well-known services, this represents active command execution directed by the skill.

social