The Agent Skills Directory

[PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it is designed to process untrusted data from the local workspace and external websites.
Ingestion points: The skill reads configuration and state from files like RESOURCES.md (which contains external links), MISSION.md, and learning-records/*.md. It also retrieves knowledge from external URLs found in the resources list.
Boundary markers: There are no explicit delimiters or specific instructions for the agent to ignore potentially malicious instructions embedded within the ingested resources or learning records.
Capability inventory: The skill possesses the ability to write files to the local filesystem (HTML/JS explainers and glossary updates) and is encouraged to suggest CLI commands for the user to execute.
Sanitization: The instructions do not specify any validation or sanitization of the content fetched from external sources before it is processed or used to generate HTML explainers.
[COMMAND_EXECUTION]: The skill instructs the agent to generate CLI commands that the user can run manually to open the generated HTML explainers in their browser.
[EXTERNAL_DOWNLOADS]: The skill includes instructions to identify and reference external educational resources and community platforms (e.g., Reddit) to support the teaching mission.

teach