The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands for development tasks, including git operations, pytest, playwright, and a local Python installation script (scripts/install-external-skills.py) located within the repository.
[INDIRECT_PROMPT_INJECTION]: The skill's primary function involves processing external and potentially untrusted data, which presents an attack surface for indirect prompt injection.
Ingestion points: The skill ingests data from pull request reviews, failing test suites, and browser traces during QA tasks (SKILL.md, README.md).
Boundary markers: There are no explicit instructions or delimiters defined to separate untrusted external content from the agent's internal instructions.
Capability inventory: The skill utilizes command execution capabilities for git, testing frameworks, and installation scripts (SKILL.md, references/debugging.md).
Sanitization: The provided files do not include mechanisms for sanitizing or validating external input before it is processed by the agent.

quality-assurance