The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes project-level artifacts such as plans, meeting minutes, and site reports to reconstruct work descriptions. These sources are external to the skill and could potentially contain malicious instructions designed to influence agent behavior.
Ingestion points: Files located in plans/, decisions/, meetings/, and site-reports/, as well as TASKS.md and PROJECT.md (specified in SKILL.md Step 3).
Boundary markers: The instructions do not specify the use of delimiters or "ignore" instructions when reading artifact content.
Capability inventory: The skill uses Read, Write, Edit, Glob, Grep, Bash, and AskUserQuestion tools.
Sanitization: There is no mention of sanitizing or filtering the content of the artifacts before processing.
[COMMAND_EXECUTION]: The skill uses the Bash tool for environment discovery.
Evidence: SKILL.md instructs the agent to run git rev-parse --show-toplevel to identify the project root.
Context: This usage is limited to directory resolution and is a standard procedure for project-aware utilities.

timetracker