The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill requires the 'bwwl' (Bitwarden workflow linter) tool. It includes a safety check in Step 1 that instructs the agent to stop if the tool is not found and explicitly forbids the agent from attempting to install it, preventing unauthorized software installation.
[COMMAND_EXECUTION]: The skill executes shell commands via Bash but limits the scope in the frontmatter to 'bwwl:*' patterns. This restricts the agent to only running the linter and checking its version, adhering to the principle of least privilege.
[INDIRECT_PROMPT_INJECTION]: The skill processes GitHub workflow files (untrusted data). However, it uses a dedicated linter tool and reports findings in a structured table rather than executing the file content or incorporating it into high-privilege prompts, which minimizes the risk of indirect injection attacks.

workflow-audit