The Agent Skills Directory

[PROMPT_INJECTION]: The skill processes untrusted user input via the $ARGUMENTS variable, which creates a surface for indirect prompt injection where malicious content in files or inputs could override agent behavior.
Ingestion points: The $ARGUMENTS placeholder in SKILL.md is the primary entry point for untrusted data.
Boundary markers: Absent; the instructions do not provide delimiters or 'ignore embedded instructions' warnings for the data being analyzed.
Capability inventory: The skill is configured with Read, Grep, Glob, and Bash tools in SKILL.md, which could be exploited if the agent follows malicious instructions hidden in the processed data.
Sanitization: Absent; there is no evidence of input validation, escaping, or filtering for the data provided in $ARGUMENTS.

performance-optimizer