The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill fetches and processes external content from Drupal module release pages, creating a surface for indirect prompt injection.
Ingestion points: The script scripts/fetch_changelog.php fetches HTML content from https://www.drupal.org/project/[module]/releases/[version].
Boundary markers: The skill instructions do not specify boundary markers or instructions to ignore potential directives embedded within the fetched changelog text.
Capability inventory: The agent has extensive shell capabilities including composer, drush, and ddev command execution, as well as file writing.
Sanitization: While the PHP script limits string lengths and filters for specific keywords, it does not sanitize the content for LLM safety or escape potential command-like sequences.
[EXTERNAL_DOWNLOADS]: The skill retrieves information from a remote source at runtime.
The scripts/fetch_changelog.php script performs GET requests to drupal.org to fetch release notes. As drupal.org is a well-known and trusted service within the Drupal ecosystem, this is considered a safe and standard operation for its intended purpose.
[COMMAND_EXECUTION]: The skill relies on executing a series of shell commands to manage the Drupal environment.
The agent is instructed to run composer update, composer require, drush updb, drush cex, and ddev snapshot via the ddev CLI tool. These operations are core to the skill's functionality and are performed within the scoped DDEV container environment.

drupal-update