The Agent Skills Directory

[PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it retrieves and processes content from external Discord messages.
Ingestion points: The read and search actions described in SKILL.md allow the agent to ingest untrusted text from Discord channels.
Boundary markers: The skill does not define specific delimiters or instructions to help the agent distinguish between message data and system instructions.
Capability inventory: The agent has the ability to send, edit, and delete messages, as well as manage channel information based on processed data.
Sanitization: There is no evidence of content filtering or sanitization for the messages retrieved from Discord.

discord-chat