The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted codebase data (source code, configuration files, and documentation) to provide analysis and remediation advice.
Ingestion points: The skill reads project files including package.json, Python source files, JavaScript/TypeScript files, and Markdown documentation.
Boundary markers: No explicit boundary markers or 'ignore embedded instructions' warnings are used when processing file content from the scanned repository.
Capability inventory: The skill has extensive shell execution capabilities (via bash, git, grep, sed, awk, and external tools like npm, vulture, knip) and file system access (read and write for remediation).
Sanitization: No sanitization or escaping of external content is performed before interpolation into shell commands or display to the agent.
[COMMAND_EXECUTION]: A command injection vulnerability exists in the logic for detecting hallucinated dependencies or AI-generated slop.
Evidence: In modules/ai-generated-bloat.md, the script for checking JavaScript packages uses jq to extract dependency keys from package.json and passes them directly to npm view $pkg version. A malicious project with package names containing shell metacharacters (e.g., ;, &, |) could execute arbitrary commands. Similarly, the Python dependency check uses variable substitution in a grep command that is susceptible to command substitution (e.g., using $(...)).
File: modules/ai-generated-bloat.md
[COMMAND_EXECUTION]: The skill makes extensive use of shell commands and subprocess calls for its core functionality.
Evidence: Numerous modules contain bash snippets for file searching, git history analysis, and metric calculation. While this is the intended purpose of the skill, it increases the overall attack surface as it processes data from the local file system.
Files: modules/quick-scan.md, modules/git-history-analysis.md, modules/growth-analysis.md, modules/code-bloat-patterns.md, modules/ai-generated-bloat.md, modules/documentation-bloat.md, modules/static-analysis-integration.md.

bloat-detector