The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external, potentially untrusted sources such as project specifications, trackers, design documents, and repository code to lead project management tasks.
Ingestion points: The agent reads from various sources including project repository files, external trackers, and files within the project board (specifically within the posts/ and decisions/ directories).
Boundary markers: The instructions do not specify the use of clear delimiters or instructions to ignore embedded commands within the ingested data, which could lead to the agent following malicious instructions hidden in the project files.
Capability inventory: The skill is capable of listing and reading local files, and it utilizes a specialized Skill tool (via project-board, handoff-prompt, and handoff-report commands) to delegate work and record decisions.
Sanitization: There is no evidence of content sanitization or validation performed on the ingested data before it is interpolated into prompts generated via the handoff-prompt tool for downstream implementation agents.

project-manager