The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes local Python scripts during the Quality Gates phase.
Evidence: python scripts/quality_gates/four_us_score.py <file> and python scripts/quality_gates/banned_word_check.py <file> are called in Phase 4.
[DYNAMIC_EXECUTION]: The skill relies on runtime execution of external scripts to validate content.
Evidence: The production pipeline is gated by the successful execution and output of Python scripts managed outside the main instruction file.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the local project environment which could contain malicious instructions.
Ingestion points: CLAUDE.md, README.md, PROJECT.md, package.json, and various project files during the auto-exploration in Phase 0.
Boundary markers: Absent. The skill instructions do not specify delimiters or guidelines to ignore instructions embedded within the files it reads.
Capability inventory: The skill can execute shell commands (python scripts/...) and write files to the workspace/ directory.
Sanitization: Absent. There is no evidence of filtering or sanitizing the content read from project files before it is processed by the agent.

kai-newsletter