The Agent Skills Directory

[SAFE]: The skill implements standard Phoenix email configuration using the well-known 'Swoosh' and 'Req' libraries. It avoids hardcoding sensitive credentials by correctly utilizing environment variables (POSTMARK_API_KEY) and project configuration files (runtime.exs, .env.sample).
[INDIRECT_PROMPT_INJECTION]: The skill ingests data from the target application's local files (e.g., mix.exs, lib/ directory, and various config files) to detect application naming and existing settings. While this creates a surface for indirect prompt injection from compromised project files, this behavior is necessary for its primary purpose of bootstrapping configuration, and no immediate high-risk capabilities are exposed through this ingestion.

bootstrap-postmark