The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes a Python script located within the project repository at {project-root}/_bmad/scripts/resolve_customization.py during both the activation and completion phases of the workflow.
[DYNAMIC_EXECUTION]: The skill implements a mechanism to dynamically load and execute instructions defined in external configuration files (customize.toml, {skill-name}.toml, and {skill-name}.user.toml) through the activation_steps_prepend, activation_steps_append, and on_complete hooks.
[INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data from the project repository, creating a vulnerability surface.
Ingestion points: The workflow reads and parses {implementation_artifacts}/sprint-status.yaml and loads file contents matching the glob pattern {project-root}/**/project-context.md into the agent's foundational context.
Boundary markers: The skill does not define specific delimiters or "ignore embedded instructions" warnings when interpolating external file content into the prompt.
Capability inventory: The skill possesses the ability to write to the local filesystem (Update sprint-status.yaml) and execute shell commands (via the python3 subprocess calls).
Sanitization: There is no evidence of sanitization, validation, or filtering of the content loaded from the status or context files before it is processed by the agent.

gds-sprint-status