The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill's 'UPDATE' mode reads existing business case documents from the filesystem to modify them. If these files contain malicious instructions, they could influence the agent's behavior during the generation of the updated document.
Ingestion points: Reads markdown files from local directories including business/, strategy/, proposals/, and cases/ (defined in SKILL.md).
Boundary markers: The skill lacks explicit instructions to the agent to ignore or delimit potentially untrusted instructions embedded within the files being updated.
Capability inventory: Includes searching directories, reading local file content, and writing new markdown files to the filesystem.
Sanitization: There are no documented sanitization steps to filter or validate the content extracted from existing files before processing.

business-case