The Agent Skills Directory

[Prompt Injection] (SAFE): No instructions found that attempt to override system behavior, bypass safety filters, or extract system prompts. The instructions are purely informative and structural.
[Data Exposure & Exfiltration] (SAFE): The skill does not access any sensitive local files, environment variables, or hardcoded credentials. No network-capable code (e.g., curl, fetch) is present.
[Remote Code Execution] (SAFE): The skill contains no scripts (.py, .js, .sh) or commands that download and execute remote content.
[Indirect Prompt Injection] (INFO): The skill is intended to process external data (customer interviews). While this represents an ingestion surface, the lack of any executable capabilities (file writes, network access, or command execution) means this surface cannot be exploited to perform unauthorized actions beyond influencing the agent's internal reasoning.
Ingestion points: External data from customer interview notes (referenced in SKILL.md).
Boundary markers: Absent; the templates do not specify delimiters for external content.
Capability inventory: None; there are no scripts or tool calls provided in this skill.
Sanitization: Absent; no filtering or sanitization logic is present for input data.
[Persistence & Privilege Escalation] (SAFE): No operations involving system configuration, service installation, or elevated permissions (sudo) were found.

product-management