The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill acts as a surface for indirect prompt injection because it processes and retrieves contact information (display names, profile names, and metadata) which may originate from untrusted external sources.
Ingestion points: Data is ingested via zavu.contacts.list, zavu.contacts.get, and zavu.contacts.getByPhone methods.
Boundary markers: The skill instructions do not specify explicit delimiters or "ignore" instructions for the data being processed.
Capability inventory: The skill has the capability to perform network requests to api.zavu.dev and manage stored contact records.
Sanitization: The skill enforces structural requirements such as E.164 formatting for phone numbers and provides email syntax validation logic.

contacts-management