The Agent Skills Directory

[Indirect Prompt Injection] (LOW): The skill possesses an attack surface for indirect prompt injection because it reads and matches content from user-provided vault files.\n
Ingestion points: Markdown files accessed via Read, Glob, and Grep tools.\n
Boundary markers: No delimiters or warnings are used to distinguish file content from system instructions.\n
Capability inventory: The skill uses the Edit tool to modify vault files based on extracted content.\n
Sanitization: No explicit sanitization or validation of the text read from files before it is processed or used in operations.

obsidian-links