The Agent Skills Directory

[Prompt Injection] (SAFE): No evidence of malicious instructions, safety bypass attempts, or role-play injections was found. The instructions are structured for marketing deliverables.
[Data Exposure & Exfiltration] (SAFE): No hardcoded credentials, API keys, or sensitive file paths were detected. The skill contains no network operation logic.
[Obfuscation] (SAFE): All skill files are human-readable Markdown; no Base64, zero-width characters, or homoglyph obfuscation was found.
[Unverifiable Dependencies & Remote Code Execution] (SAFE): The skill does not include any scripts, executable code, or package installation commands.
[Indirect Prompt Injection] (SAFE): While the skill ingests user input regarding product details, it possesses no dangerous capabilities. Evidence: 1. Ingestion points: Product and audience descriptions in INTAKE.md. 2. Boundary markers: Absent. 3. Capability inventory: None (no code, network, or file-write operations across all files). 4. Sanitization: Absent. The lack of capabilities prevents any exploitation.
[Privilege Escalation] (SAFE): No administrative or elevated command execution patterns found.
[Persistence Mechanisms] (SAFE): No mechanisms for maintaining access across sessions were detected.
[Metadata Poisoning] (SAFE): Skill metadata is accurate and contains no hidden instructions.
[Time-Delayed / Conditional Attacks] (SAFE): No logic gating behavior based on time or environment was found.
[Dynamic Execution] (SAFE): No runtime code generation or dynamic loading was detected.

positioning-messaging