The Agent Skills Directory

[PROMPT_INJECTION]: The skill's primary function involves instructing an external model (Gemini) to read and analyze workspace files, creating an attack surface for indirect prompt injection.
Ingestion points: Files are read from the workspace using the --cd flag or based on paths provided within the prompt (e.g., as suggested in assets/prompt-template.md).
Boundary markers: The skill uses prompt templates that include a "Constraints" section to steer model behavior, such as requiring "Unified Diff Patch ONLY" and prohibiting direct modifications.
Capability inventory: The skill uses scripts/gemini_bridge.py to execute the gemini CLI tool to process these files.
Sanitization: No explicit sanitization or filtering of file content is performed before the data is processed by the external model.
[COMMAND_EXECUTION]: The skill uses a bridge script (scripts/gemini_bridge.py) to interact with the gemini command-line utility. The script employs subprocess.Popen with shell=False to securely execute the CLI tool with arguments defined at runtime.

collaborating-with-gemini