The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external project files, including dependency manifests and source code, which could contain adversarial instructions aimed at manipulating the agent's output or actions.
Ingestion points: SKILL.md requires reading package.json, pnpm-lock.yaml, and repository source files.
Boundary markers: There are no instructions to use delimiters or ignore embedded instructions within the data being processed.
Capability inventory: The agent is tasked with reading files, writing code changes for remediation, and executing pnpm audit commands.
Sanitization: The skill lacks procedures for sanitizing or validating external content before it is processed by the agent.

vuln-check