The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill ingests and analyzes content from external project files which could contain embedded instructions intended to influence the agent's behavior.
Ingestion points: PRD.md, spec.md, plan.md, PLAN.md, and project/TASKS.md as specified in the analysis steps.
Boundary markers: The instructions do not define specific delimiters or instructions for the agent to ignore potentially malicious content within the ingested artifacts.
Capability inventory: The skill is explicitly constrained to be read-only and lacks capabilities for network communication, arbitrary shell command execution, or unauthorized file modification.
Sanitization: There is no evidence of sanitization or filtering of the content read from the project artifacts before processing.

spec-analyze