The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill reads external data from .agents/projects/<project>/CONTEXT.md to define project-specific terms. While this represents an ingestion point for potentially untrusted data, the skill's scope is strictly limited to text re-explanation and it lacks sensitive capabilities such as network access, file writing, or command execution.
[SAFE]: No malicious patterns, obfuscation, data exfiltration, or unauthorized command execution were detected. The skill uses standard instructional language for its stated purpose.

bro-what