The Agent Skills Directory

[DATA_EXPOSURE]: The skill reads local configuration files from the user's home directory (~/.claude/settings.json) and project-specific settings (.claude/settings.json, .claude/settings.local.json). This data is used to resolve primaryProject IDs and determine file placement conventions for recording decisions.
[INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied information from the conversation history, including decision rationales and consequences, to generate persistent notes. This represents a potential surface where untrusted data could influence the agent's output during the note-drafting phase.

bm-decide