The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface through its file reading capabilities. 1. Ingestion points: The skill reads campaign brief files from 'campaigns/', 'marketing/', and 'gtm/' directories during UPDATE and FIND operations. 2. Boundary markers: No specific delimiters or safety instructions are defined to separate ingested file content from the agent's system instructions. 3. Capability inventory: The skill has the ability to read and write markdown files. 4. Sanitization: No sanitization or validation of the content of the ingested files is performed before processing. Remediation: Wrap external content in delimiters (e.g., XML-style tags) with an explicit warning to the agent to ignore any instructions embedded within the ingested data.

campaign-brief